--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) --- {"level":"debug","ts":"2026-07-14T23:34:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"baf42b4be2778fb5dbb22783a89dd7addd40eafbc32bec97a106f2889a83cf9d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:34:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"baf42b4be2778fb5dbb22783a89dd7addd40eafbc32bec97a106f2889a83cf9d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:34:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/baf42b4be2778fb5dbb22783a89dd7addd40eafbc32bec97a106f2889a83cf9d"} {"level":"info","ts":"2026-07-14T23:34:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/baf42b4be2778fb5dbb22783a89dd7addd40eafbc32bec97a106f2889a83cf9d"} {"level":"debug","ts":"2026-07-14T23:34:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"baf42b4be2778fb5dbb22783a89dd7addd40eafbc32bec97a106f2889a83cf9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:34:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:34:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["baf42b4be2778fb5dbb22783a89dd7addd40eafbc32bec97a106f2889a83cf9d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:34:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"baf42b4be2778fb5dbb22783a89dd7addd40eafbc32bec97a106f2889a83cf9d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:34:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"baf42b4be2778fb5dbb22783a89dd7addd40eafbc32bec97a106f2889a83cf9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:34:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:34:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:34:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"baf42b4be2778fb5dbb22783a89dd7addd40eafbc32bec97a106f2889a83cf9d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:34:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"baf42b4be2778fb5dbb22783a89dd7addd40eafbc32bec97a106f2889a83cf9d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:34:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/baf42b4be2778fb5dbb22783a89dd7addd40eafbc32bec97a106f2889a83cf9d"} {"level":"debug","ts":"2026-07-14T23:34:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"baf42b4be2778fb5dbb22783a89dd7addd40eafbc32bec97a106f2889a83cf9d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:34:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"baf42b4be2778fb5dbb22783a89dd7addd40eafbc32bec97a106f2889a83cf9d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:34:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/baf42b4be2778fb5dbb22783a89dd7addd40eafbc32bec97a106f2889a83cf9d"} {"level":"debug","ts":"2026-07-14T23:34:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"baf42b4be2778fb5dbb22783a89dd7addd40eafbc32bec97a106f2889a83cf9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:34:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:34:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["baf42b4be2778fb5dbb22783a89dd7addd40eafbc32bec97a106f2889a83cf9d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:34:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"baf42b4be2778fb5dbb22783a89dd7addd40eafbc32bec97a106f2889a83cf9d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:34:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"baf42b4be2778fb5dbb22783a89dd7addd40eafbc32bec97a106f2889a83cf9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:34:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:34:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:34:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"baf42b4be2778fb5dbb22783a89dd7addd40eafbc32bec97a106f2889a83cf9d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:34:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"baf42b4be2778fb5dbb22783a89dd7addd40eafbc32bec97a106f2889a83cf9d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:34:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"baf42b4be2778fb5dbb22783a89dd7addd40eafbc32bec97a106f2889a83cf9d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:34:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/baf42b4be2778fb5dbb22783a89dd7addd40eafbc32bec97a106f2889a83cf9d"} {"level":"debug","ts":"2026-07-14T23:34:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"baf42b4be2778fb5dbb22783a89dd7addd40eafbc32bec97a106f2889a83cf9d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:34:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95428b079d8df85616b3ea63ea141f183a0090fc1561e61d2a169f328d3c47d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:34:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:34:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:34:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95428b079d8df85616b3ea63ea141f183a0090fc1561e61d2a169f328d3c47d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:34:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a52c4efbe6743e458b1028ee86e57c6997314daa9ac656ac2213a7925ce36cc7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:34:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:34:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:34:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/baf42b4be2778fb5dbb22783a89dd7addd40eafbc32bec97a106f2889a83cf9d"} {"level":"info","ts":"2026-07-14T23:34:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a52c4efbe6743e458b1028ee86e57c6997314daa9ac656ac2213a7925ce36cc7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:34:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95428b079d8df85616b3ea63ea141f183a0090fc1561e61d2a169f328d3c47d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:34:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:34:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:34:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95428b079d8df85616b3ea63ea141f183a0090fc1561e61d2a169f328d3c47d9"} {"level":"info","ts":"2026-07-14T23:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95428b079d8df85616b3ea63ea141f183a0090fc1561e61d2a169f328d3c47d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"baf42b4be2778fb5dbb22783a89dd7addd40eafbc32bec97a106f2889a83cf9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:34:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:34:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["baf42b4be2778fb5dbb22783a89dd7addd40eafbc32bec97a106f2889a83cf9d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"baf42b4be2778fb5dbb22783a89dd7addd40eafbc32bec97a106f2889a83cf9d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a52c4efbe6743e458b1028ee86e57c6997314daa9ac656ac2213a7925ce36cc7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:34:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:34:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a52c4efbe6743e458b1028ee86e57c6997314daa9ac656ac2213a7925ce36cc7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95428b079d8df85616b3ea63ea141f183a0090fc1561e61d2a169f328d3c47d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:34:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:34:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["95428b079d8df85616b3ea63ea141f183a0090fc1561e61d2a169f328d3c47d9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a52c4efbe6743e458b1028ee86e57c6997314daa9ac656ac2213a7925ce36cc7"} {"level":"info","ts":"2026-07-14T23:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95428b079d8df85616b3ea63ea141f183a0090fc1561e61d2a169f328d3c47d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"baf42b4be2778fb5dbb22783a89dd7addd40eafbc32bec97a106f2889a83cf9d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a52c4efbe6743e458b1028ee86e57c6997314daa9ac656ac2213a7925ce36cc7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:34:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:34:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a52c4efbe6743e458b1028ee86e57c6997314daa9ac656ac2213a7925ce36cc7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a52c4efbe6743e458b1028ee86e57c6997314daa9ac656ac2213a7925ce36cc7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95428b079d8df85616b3ea63ea141f183a0090fc1561e61d2a169f328d3c47d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:34:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:34:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95428b079d8df85616b3ea63ea141f183a0090fc1561e61d2a169f328d3c47d9"} {"level":"info","ts":"2026-07-14T23:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95428b079d8df85616b3ea63ea141f183a0090fc1561e61d2a169f328d3c47d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a52c4efbe6743e458b1028ee86e57c6997314daa9ac656ac2213a7925ce36cc7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95428b079d8df85616b3ea63ea141f183a0090fc1561e61d2a169f328d3c47d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:34:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:34:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["95428b079d8df85616b3ea63ea141f183a0090fc1561e61d2a169f328d3c47d9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95428b079d8df85616b3ea63ea141f183a0090fc1561e61d2a169f328d3c47d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95428b079d8df85616b3ea63ea141f183a0090fc1561e61d2a169f328d3c47d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:34:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:34:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["95428b079d8df85616b3ea63ea141f183a0090fc1561e61d2a169f328d3c47d9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/baf42b4be2778fb5dbb22783a89dd7addd40eafbc32bec97a106f2889a83cf9d"} {"level":"error","ts":"2026-07-14T23:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"95428b079d8df85616b3ea63ea141f183a0090fc1561e61d2a169f328d3c47d9","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"95428b079d8df85616b3ea63ea141f183a0090fc1561e61d2a169f328d3c47d9\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T23:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95428b079d8df85616b3ea63ea141f183a0090fc1561e61d2a169f328d3c47d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95428b079d8df85616b3ea63ea141f183a0090fc1561e61d2a169f328d3c47d9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a52c4efbe6743e458b1028ee86e57c6997314daa9ac656ac2213a7925ce36cc7"} {"level":"info","ts":"2026-07-14T23:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95428b079d8df85616b3ea63ea141f183a0090fc1561e61d2a169f328d3c47d9"} {"level":"info","ts":"2026-07-14T23:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4c767ac39ef3afbb43161b73eb9d9d276813118d162d8332b75fb97b0a8b57d0"} {"level":"info","ts":"2026-07-14T23:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6fa5f1585b2e274210b227c0f7f47cbbf1a7010fca51d190fdf05fcd77c8fbf8"} {"level":"info","ts":"2026-07-14T23:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0b78dabdc43725c53eef7697417c5f1aa98f172875365fd136a5dbe8c2c1e8f4"} {"level":"info","ts":"2026-07-14T23:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6f74435787cfec639b08a1e127be2725d806b421a4bcf3de9c84fe1dbdbf8472"} {"level":"info","ts":"2026-07-14T23:35:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a52c4efbe6743e458b1028ee86e57c6997314daa9ac656ac2213a7925ce36cc7"} {"level":"info","ts":"2026-07-14T23:35:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/baf42b4be2778fb5dbb22783a89dd7addd40eafbc32bec97a106f2889a83cf9d"} {"level":"info","ts":"2026-07-14T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/95428b079d8df85616b3ea63ea141f183a0090fc1561e61d2a169f328d3c47d9"} {"level":"info","ts":"2026-07-14T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c6b809215e2f363b44c7a849d6e41d8442986cafd05e01bbe04e6f98e7f91932"} {"level":"debug","ts":"2026-07-14T23:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5fad47ffc1d8c69c4202dba81340880877bd8073d47e151e598706074623c291","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:36:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:36:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5fad47ffc1d8c69c4202dba81340880877bd8073d47e151e598706074623c291","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5fad47ffc1d8c69c4202dba81340880877bd8073d47e151e598706074623c291","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5fad47ffc1d8c69c4202dba81340880877bd8073d47e151e598706074623c291","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5fad47ffc1d8c69c4202dba81340880877bd8073d47e151e598706074623c291"} {"level":"debug","ts":"2026-07-14T23:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5fad47ffc1d8c69c4202dba81340880877bd8073d47e151e598706074623c291","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5fad47ffc1d8c69c4202dba81340880877bd8073d47e151e598706074623c291"} {"level":"debug","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5fad47ffc1d8c69c4202dba81340880877bd8073d47e151e598706074623c291","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:36:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:36:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5fad47ffc1d8c69c4202dba81340880877bd8073d47e151e598706074623c291"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5fad47ffc1d8c69c4202dba81340880877bd8073d47e151e598706074623c291","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5fad47ffc1d8c69c4202dba81340880877bd8073d47e151e598706074623c291","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ce19fe35a7f002180b443fe04bfc4ee54ac316645e5add4c44f454045b62c3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:36:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:36:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ce19fe35a7f002180b443fe04bfc4ee54ac316645e5add4c44f454045b62c3c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ce19fe35a7f002180b443fe04bfc4ee54ac316645e5add4c44f454045b62c3c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ce19fe35a7f002180b443fe04bfc4ee54ac316645e5add4c44f454045b62c3c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5fad47ffc1d8c69c4202dba81340880877bd8073d47e151e598706074623c291"} {"level":"debug","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ce19fe35a7f002180b443fe04bfc4ee54ac316645e5add4c44f454045b62c3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:36:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:36:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ce19fe35a7f002180b443fe04bfc4ee54ac316645e5add4c44f454045b62c3c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ce19fe35a7f002180b443fe04bfc4ee54ac316645e5add4c44f454045b62c3c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ce19fe35a7f002180b443fe04bfc4ee54ac316645e5add4c44f454045b62c3c"} {"level":"debug","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ce19fe35a7f002180b443fe04bfc4ee54ac316645e5add4c44f454045b62c3c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33933c2e4c2cc3c046806003802206ba33ba5e0eee2aa9a140c764b7f8670056","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:36:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:36:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ce19fe35a7f002180b443fe04bfc4ee54ac316645e5add4c44f454045b62c3c"} {"level":"info","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33933c2e4c2cc3c046806003802206ba33ba5e0eee2aa9a140c764b7f8670056","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33933c2e4c2cc3c046806003802206ba33ba5e0eee2aa9a140c764b7f8670056","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:36:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:36:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33933c2e4c2cc3c046806003802206ba33ba5e0eee2aa9a140c764b7f8670056","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33933c2e4c2cc3c046806003802206ba33ba5e0eee2aa9a140c764b7f8670056","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:36:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:36:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33933c2e4c2cc3c046806003802206ba33ba5e0eee2aa9a140c764b7f8670056"} {"level":"error","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"33933c2e4c2cc3c046806003802206ba33ba5e0eee2aa9a140c764b7f8670056","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"33933c2e4c2cc3c046806003802206ba33ba5e0eee2aa9a140c764b7f8670056\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33933c2e4c2cc3c046806003802206ba33ba5e0eee2aa9a140c764b7f8670056","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33933c2e4c2cc3c046806003802206ba33ba5e0eee2aa9a140c764b7f8670056","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33933c2e4c2cc3c046806003802206ba33ba5e0eee2aa9a140c764b7f8670056"} {"level":"debug","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd062ffd7f1da11efa4335c2c7748ed0786d357d00c7d051362224c2c0a344d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:36:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:36:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd062ffd7f1da11efa4335c2c7748ed0786d357d00c7d051362224c2c0a344d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd062ffd7f1da11efa4335c2c7748ed0786d357d00c7d051362224c2c0a344d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd062ffd7f1da11efa4335c2c7748ed0786d357d00c7d051362224c2c0a344d4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd062ffd7f1da11efa4335c2c7748ed0786d357d00c7d051362224c2c0a344d4"} {"level":"debug","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33933c2e4c2cc3c046806003802206ba33ba5e0eee2aa9a140c764b7f8670056","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:36:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:36:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["33933c2e4c2cc3c046806003802206ba33ba5e0eee2aa9a140c764b7f8670056"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33933c2e4c2cc3c046806003802206ba33ba5e0eee2aa9a140c764b7f8670056","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33933c2e4c2cc3c046806003802206ba33ba5e0eee2aa9a140c764b7f8670056","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd062ffd7f1da11efa4335c2c7748ed0786d357d00c7d051362224c2c0a344d4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd062ffd7f1da11efa4335c2c7748ed0786d357d00c7d051362224c2c0a344d4"} {"level":"debug","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ce19fe35a7f002180b443fe04bfc4ee54ac316645e5add4c44f454045b62c3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:36:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:36:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2ce19fe35a7f002180b443fe04bfc4ee54ac316645e5add4c44f454045b62c3c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33933c2e4c2cc3c046806003802206ba33ba5e0eee2aa9a140c764b7f8670056"} {"level":"info","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ce19fe35a7f002180b443fe04bfc4ee54ac316645e5add4c44f454045b62c3c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd062ffd7f1da11efa4335c2c7748ed0786d357d00c7d051362224c2c0a344d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:36:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:36:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bd062ffd7f1da11efa4335c2c7748ed0786d357d00c7d051362224c2c0a344d4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd062ffd7f1da11efa4335c2c7748ed0786d357d00c7d051362224c2c0a344d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ce19fe35a7f002180b443fe04bfc4ee54ac316645e5add4c44f454045b62c3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:36:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:36:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ce19fe35a7f002180b443fe04bfc4ee54ac316645e5add4c44f454045b62c3c"} {"level":"info","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ce19fe35a7f002180b443fe04bfc4ee54ac316645e5add4c44f454045b62c3c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd062ffd7f1da11efa4335c2c7748ed0786d357d00c7d051362224c2c0a344d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:36:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:36:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd062ffd7f1da11efa4335c2c7748ed0786d357d00c7d051362224c2c0a344d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b74b75b95e7438a5ffdaf7bd4404911562f541f77c655204e1efbbe40c13a029","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:36:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:36:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd062ffd7f1da11efa4335c2c7748ed0786d357d00c7d051362224c2c0a344d4"} {"level":"info","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b74b75b95e7438a5ffdaf7bd4404911562f541f77c655204e1efbbe40c13a029","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ce19fe35a7f002180b443fe04bfc4ee54ac316645e5add4c44f454045b62c3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:36:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:36:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2ce19fe35a7f002180b443fe04bfc4ee54ac316645e5add4c44f454045b62c3c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ce19fe35a7f002180b443fe04bfc4ee54ac316645e5add4c44f454045b62c3c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd062ffd7f1da11efa4335c2c7748ed0786d357d00c7d051362224c2c0a344d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:36:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:36:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bd062ffd7f1da11efa4335c2c7748ed0786d357d00c7d051362224c2c0a344d4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b74b75b95e7438a5ffdaf7bd4404911562f541f77c655204e1efbbe40c13a029"} {"level":"info","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd062ffd7f1da11efa4335c2c7748ed0786d357d00c7d051362224c2c0a344d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b74b75b95e7438a5ffdaf7bd4404911562f541f77c655204e1efbbe40c13a029","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:36:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:36:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b74b75b95e7438a5ffdaf7bd4404911562f541f77c655204e1efbbe40c13a029"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ce19fe35a7f002180b443fe04bfc4ee54ac316645e5add4c44f454045b62c3c"} {"level":"info","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b74b75b95e7438a5ffdaf7bd4404911562f541f77c655204e1efbbe40c13a029","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ce19fe35a7f002180b443fe04bfc4ee54ac316645e5add4c44f454045b62c3c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd062ffd7f1da11efa4335c2c7748ed0786d357d00c7d051362224c2c0a344d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:36:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:36:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd062ffd7f1da11efa4335c2c7748ed0786d357d00c7d051362224c2c0a344d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b74b75b95e7438a5ffdaf7bd4404911562f541f77c655204e1efbbe40c13a029","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd062ffd7f1da11efa4335c2c7748ed0786d357d00c7d051362224c2c0a344d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd062ffd7f1da11efa4335c2c7748ed0786d357d00c7d051362224c2c0a344d4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd062ffd7f1da11efa4335c2c7748ed0786d357d00c7d051362224c2c0a344d4"} {"level":"debug","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd062ffd7f1da11efa4335c2c7748ed0786d357d00c7d051362224c2c0a344d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:36:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:36:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bd062ffd7f1da11efa4335c2c7748ed0786d357d00c7d051362224c2c0a344d4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b74b75b95e7438a5ffdaf7bd4404911562f541f77c655204e1efbbe40c13a029"} {"level":"info","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd062ffd7f1da11efa4335c2c7748ed0786d357d00c7d051362224c2c0a344d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd062ffd7f1da11efa4335c2c7748ed0786d357d00c7d051362224c2c0a344d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:36:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:36:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd062ffd7f1da11efa4335c2c7748ed0786d357d00c7d051362224c2c0a344d4"} {"level":"info","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd062ffd7f1da11efa4335c2c7748ed0786d357d00c7d051362224c2c0a344d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd062ffd7f1da11efa4335c2c7748ed0786d357d00c7d051362224c2c0a344d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd062ffd7f1da11efa4335c2c7748ed0786d357d00c7d051362224c2c0a344d4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd062ffd7f1da11efa4335c2c7748ed0786d357d00c7d051362224c2c0a344d4"} {"level":"debug","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd062ffd7f1da11efa4335c2c7748ed0786d357d00c7d051362224c2c0a344d4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd062ffd7f1da11efa4335c2c7748ed0786d357d00c7d051362224c2c0a344d4"} {"level":"debug","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1573b87ef683f20144eeabe3dafa59d6ea5ad4e8e826790e689a5ab916693a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:36:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:36:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1573b87ef683f20144eeabe3dafa59d6ea5ad4e8e826790e689a5ab916693a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd062ffd7f1da11efa4335c2c7748ed0786d357d00c7d051362224c2c0a344d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:36:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:36:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bd062ffd7f1da11efa4335c2c7748ed0786d357d00c7d051362224c2c0a344d4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1573b87ef683f20144eeabe3dafa59d6ea5ad4e8e826790e689a5ab916693a7"} {"level":"info","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd062ffd7f1da11efa4335c2c7748ed0786d357d00c7d051362224c2c0a344d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1573b87ef683f20144eeabe3dafa59d6ea5ad4e8e826790e689a5ab916693a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:36:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:36:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d1573b87ef683f20144eeabe3dafa59d6ea5ad4e8e826790e689a5ab916693a7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1573b87ef683f20144eeabe3dafa59d6ea5ad4e8e826790e689a5ab916693a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64325db7a71e9bec8719b937338272dd6b0d47488ac9b80fba8c4fc4913c8097","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:36:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:36:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64325db7a71e9bec8719b937338272dd6b0d47488ac9b80fba8c4fc4913c8097"} {"level":"info","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64325db7a71e9bec8719b937338272dd6b0d47488ac9b80fba8c4fc4913c8097","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd062ffd7f1da11efa4335c2c7748ed0786d357d00c7d051362224c2c0a344d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1573b87ef683f20144eeabe3dafa59d6ea5ad4e8e826790e689a5ab916693a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:36:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:36:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1573b87ef683f20144eeabe3dafa59d6ea5ad4e8e826790e689a5ab916693a7"} {"level":"info","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1573b87ef683f20144eeabe3dafa59d6ea5ad4e8e826790e689a5ab916693a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64325db7a71e9bec8719b937338272dd6b0d47488ac9b80fba8c4fc4913c8097","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:36:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:36:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["64325db7a71e9bec8719b937338272dd6b0d47488ac9b80fba8c4fc4913c8097"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64325db7a71e9bec8719b937338272dd6b0d47488ac9b80fba8c4fc4913c8097","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1573b87ef683f20144eeabe3dafa59d6ea5ad4e8e826790e689a5ab916693a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:36:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:36:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d1573b87ef683f20144eeabe3dafa59d6ea5ad4e8e826790e689a5ab916693a7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd062ffd7f1da11efa4335c2c7748ed0786d357d00c7d051362224c2c0a344d4"} {"level":"info","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1573b87ef683f20144eeabe3dafa59d6ea5ad4e8e826790e689a5ab916693a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64325db7a71e9bec8719b937338272dd6b0d47488ac9b80fba8c4fc4913c8097","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:36:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:36:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64325db7a71e9bec8719b937338272dd6b0d47488ac9b80fba8c4fc4913c8097","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1573b87ef683f20144eeabe3dafa59d6ea5ad4e8e826790e689a5ab916693a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67a925f33b3a3b0f4691b0240ac4ae7d520e90a47859bd24df662b97f2192640","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:36:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:36:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64325db7a71e9bec8719b937338272dd6b0d47488ac9b80fba8c4fc4913c8097"} {"level":"info","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67a925f33b3a3b0f4691b0240ac4ae7d520e90a47859bd24df662b97f2192640","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64325db7a71e9bec8719b937338272dd6b0d47488ac9b80fba8c4fc4913c8097","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:36:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:36:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["64325db7a71e9bec8719b937338272dd6b0d47488ac9b80fba8c4fc4913c8097"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1573b87ef683f20144eeabe3dafa59d6ea5ad4e8e826790e689a5ab916693a7"} {"level":"info","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64325db7a71e9bec8719b937338272dd6b0d47488ac9b80fba8c4fc4913c8097","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eacec045572b5ccc2719481783cc081165bc877777e81625f615a0c23a544d33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:36:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:36:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eacec045572b5ccc2719481783cc081165bc877777e81625f615a0c23a544d33","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67a925f33b3a3b0f4691b0240ac4ae7d520e90a47859bd24df662b97f2192640","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:36:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:36:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67a925f33b3a3b0f4691b0240ac4ae7d520e90a47859bd24df662b97f2192640"} {"level":"info","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67a925f33b3a3b0f4691b0240ac4ae7d520e90a47859bd24df662b97f2192640","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64325db7a71e9bec8719b937338272dd6b0d47488ac9b80fba8c4fc4913c8097","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:36:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:36:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64325db7a71e9bec8719b937338272dd6b0d47488ac9b80fba8c4fc4913c8097","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eacec045572b5ccc2719481783cc081165bc877777e81625f615a0c23a544d33","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67a925f33b3a3b0f4691b0240ac4ae7d520e90a47859bd24df662b97f2192640","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:36:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:36:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["67a925f33b3a3b0f4691b0240ac4ae7d520e90a47859bd24df662b97f2192640"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64325db7a71e9bec8719b937338272dd6b0d47488ac9b80fba8c4fc4913c8097"} {"level":"info","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67a925f33b3a3b0f4691b0240ac4ae7d520e90a47859bd24df662b97f2192640","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64325db7a71e9bec8719b937338272dd6b0d47488ac9b80fba8c4fc4913c8097","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:36:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:36:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["64325db7a71e9bec8719b937338272dd6b0d47488ac9b80fba8c4fc4913c8097"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eacec045572b5ccc2719481783cc081165bc877777e81625f615a0c23a544d33"} {"level":"info","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64325db7a71e9bec8719b937338272dd6b0d47488ac9b80fba8c4fc4913c8097","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eacec045572b5ccc2719481783cc081165bc877777e81625f615a0c23a544d33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:36:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:36:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eacec045572b5ccc2719481783cc081165bc877777e81625f615a0c23a544d33"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67a925f33b3a3b0f4691b0240ac4ae7d520e90a47859bd24df662b97f2192640"} {"level":"info","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eacec045572b5ccc2719481783cc081165bc877777e81625f615a0c23a544d33","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67a925f33b3a3b0f4691b0240ac4ae7d520e90a47859bd24df662b97f2192640","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cae60a13d29bbbf29186c669a926b3846172de4e8c78bf303e014b13379cb76e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:36:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:36:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cae60a13d29bbbf29186c669a926b3846172de4e8c78bf303e014b13379cb76e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64325db7a71e9bec8719b937338272dd6b0d47488ac9b80fba8c4fc4913c8097","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:36:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:36:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64325db7a71e9bec8719b937338272dd6b0d47488ac9b80fba8c4fc4913c8097"} {"level":"info","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64325db7a71e9bec8719b937338272dd6b0d47488ac9b80fba8c4fc4913c8097","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53ab23f9635b11147c40cc42694fc6439fb5c391681b9c2a2e3e14ea036daa73","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:36:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:36:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cae60a13d29bbbf29186c669a926b3846172de4e8c78bf303e014b13379cb76e"} {"level":"info","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53ab23f9635b11147c40cc42694fc6439fb5c391681b9c2a2e3e14ea036daa73","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eacec045572b5ccc2719481783cc081165bc877777e81625f615a0c23a544d33","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20074b64f0086a356b1519bbbfe7ebb80bb8ee9794ba55311d3c98dcf9498314","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:36:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:36:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20074b64f0086a356b1519bbbfe7ebb80bb8ee9794ba55311d3c98dcf9498314","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cae60a13d29bbbf29186c669a926b3846172de4e8c78bf303e014b13379cb76e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:36:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:36:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cae60a13d29bbbf29186c669a926b3846172de4e8c78bf303e014b13379cb76e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53ab23f9635b11147c40cc42694fc6439fb5c391681b9c2a2e3e14ea036daa73"} {"level":"info","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cae60a13d29bbbf29186c669a926b3846172de4e8c78bf303e014b13379cb76e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64325db7a71e9bec8719b937338272dd6b0d47488ac9b80fba8c4fc4913c8097","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:36:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:36:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["64325db7a71e9bec8719b937338272dd6b0d47488ac9b80fba8c4fc4913c8097"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64325db7a71e9bec8719b937338272dd6b0d47488ac9b80fba8c4fc4913c8097","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53ab23f9635b11147c40cc42694fc6439fb5c391681b9c2a2e3e14ea036daa73","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:36:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:36:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["53ab23f9635b11147c40cc42694fc6439fb5c391681b9c2a2e3e14ea036daa73"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eacec045572b5ccc2719481783cc081165bc877777e81625f615a0c23a544d33"} {"level":"info","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53ab23f9635b11147c40cc42694fc6439fb5c391681b9c2a2e3e14ea036daa73","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20074b64f0086a356b1519bbbfe7ebb80bb8ee9794ba55311d3c98dcf9498314","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:36:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:36:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20074b64f0086a356b1519bbbfe7ebb80bb8ee9794ba55311d3c98dcf9498314","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cae60a13d29bbbf29186c669a926b3846172de4e8c78bf303e014b13379cb76e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64325db7a71e9bec8719b937338272dd6b0d47488ac9b80fba8c4fc4913c8097","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53ab23f9635b11147c40cc42694fc6439fb5c391681b9c2a2e3e14ea036daa73","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"20074b64f0086a356b1519bbbfe7ebb80bb8ee9794ba55311d3c98dcf9498314","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20074b64f0086a356b1519bbbfe7ebb80bb8ee9794ba55311d3c98dcf9498314"} {"level":"debug","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20074b64f0086a356b1519bbbfe7ebb80bb8ee9794ba55311d3c98dcf9498314","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:36:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:36:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["20074b64f0086a356b1519bbbfe7ebb80bb8ee9794ba55311d3c98dcf9498314"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20074b64f0086a356b1519bbbfe7ebb80bb8ee9794ba55311d3c98dcf9498314","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"20074b64f0086a356b1519bbbfe7ebb80bb8ee9794ba55311d3c98dcf9498314","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64325db7a71e9bec8719b937338272dd6b0d47488ac9b80fba8c4fc4913c8097"} {"level":"info","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53ab23f9635b11147c40cc42694fc6439fb5c391681b9c2a2e3e14ea036daa73"} {"level":"info","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cae60a13d29bbbf29186c669a926b3846172de4e8c78bf303e014b13379cb76e"} {"level":"info","ts":"2026-07-14T23:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20074b64f0086a356b1519bbbfe7ebb80bb8ee9794ba55311d3c98dcf9498314"} {"level":"debug","ts":"2026-07-14T23:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1af413c566c3331ee7eb2cbf4d7a2cfc37199f6c06752307d97c4a892d40ee6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:36:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:36:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1af413c566c3331ee7eb2cbf4d7a2cfc37199f6c06752307d97c4a892d40ee6c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1af413c566c3331ee7eb2cbf4d7a2cfc37199f6c06752307d97c4a892d40ee6c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1af413c566c3331ee7eb2cbf4d7a2cfc37199f6c06752307d97c4a892d40ee6c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1af413c566c3331ee7eb2cbf4d7a2cfc37199f6c06752307d97c4a892d40ee6c"} {"level":"debug","ts":"2026-07-14T23:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1af413c566c3331ee7eb2cbf4d7a2cfc37199f6c06752307d97c4a892d40ee6c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1af413c566c3331ee7eb2cbf4d7a2cfc37199f6c06752307d97c4a892d40ee6c"} {"level":"debug","ts":"2026-07-14T23:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1af413c566c3331ee7eb2cbf4d7a2cfc37199f6c06752307d97c4a892d40ee6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:36:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:36:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1af413c566c3331ee7eb2cbf4d7a2cfc37199f6c06752307d97c4a892d40ee6c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1af413c566c3331ee7eb2cbf4d7a2cfc37199f6c06752307d97c4a892d40ee6c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1af413c566c3331ee7eb2cbf4d7a2cfc37199f6c06752307d97c4a892d40ee6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:36:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:36:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1af413c566c3331ee7eb2cbf4d7a2cfc37199f6c06752307d97c4a892d40ee6c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1af413c566c3331ee7eb2cbf4d7a2cfc37199f6c06752307d97c4a892d40ee6c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1af413c566c3331ee7eb2cbf4d7a2cfc37199f6c06752307d97c4a892d40ee6c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1af413c566c3331ee7eb2cbf4d7a2cfc37199f6c06752307d97c4a892d40ee6c"} {"level":"debug","ts":"2026-07-14T23:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1af413c566c3331ee7eb2cbf4d7a2cfc37199f6c06752307d97c4a892d40ee6c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1af413c566c3331ee7eb2cbf4d7a2cfc37199f6c06752307d97c4a892d40ee6c"} {"level":"debug","ts":"2026-07-14T23:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1af413c566c3331ee7eb2cbf4d7a2cfc37199f6c06752307d97c4a892d40ee6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:36:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:36:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1af413c566c3331ee7eb2cbf4d7a2cfc37199f6c06752307d97c4a892d40ee6c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1af413c566c3331ee7eb2cbf4d7a2cfc37199f6c06752307d97c4a892d40ee6c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1af413c566c3331ee7eb2cbf4d7a2cfc37199f6c06752307d97c4a892d40ee6c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1af413c566c3331ee7eb2cbf4d7a2cfc37199f6c06752307d97c4a892d40ee6c"} {"level":"debug","ts":"2026-07-14T23:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a4295d6008243abdf35fb8146dab8fe7c4718853333d7e619b33a96ee59fcde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:36:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:36:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a4295d6008243abdf35fb8146dab8fe7c4718853333d7e619b33a96ee59fcde","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1a4295d6008243abdf35fb8146dab8fe7c4718853333d7e619b33a96ee59fcde","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1a4295d6008243abdf35fb8146dab8fe7c4718853333d7e619b33a96ee59fcde","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a4295d6008243abdf35fb8146dab8fe7c4718853333d7e619b33a96ee59fcde"} {"level":"debug","ts":"2026-07-14T23:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1a4295d6008243abdf35fb8146dab8fe7c4718853333d7e619b33a96ee59fcde","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a4295d6008243abdf35fb8146dab8fe7c4718853333d7e619b33a96ee59fcde"} {"level":"debug","ts":"2026-07-14T23:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a4295d6008243abdf35fb8146dab8fe7c4718853333d7e619b33a96ee59fcde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:36:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:36:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1a4295d6008243abdf35fb8146dab8fe7c4718853333d7e619b33a96ee59fcde"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a4295d6008243abdf35fb8146dab8fe7c4718853333d7e619b33a96ee59fcde","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a4295d6008243abdf35fb8146dab8fe7c4718853333d7e619b33a96ee59fcde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:36:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:36:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a4295d6008243abdf35fb8146dab8fe7c4718853333d7e619b33a96ee59fcde","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cae086f2dfc373e5aad98209a1a1cc4a7a4fd8bab9b2c0e3f0785b8028ec7c58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:36:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:36:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a4295d6008243abdf35fb8146dab8fe7c4718853333d7e619b33a96ee59fcde"} {"level":"info","ts":"2026-07-14T23:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cae086f2dfc373e5aad98209a1a1cc4a7a4fd8bab9b2c0e3f0785b8028ec7c58","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a4295d6008243abdf35fb8146dab8fe7c4718853333d7e619b33a96ee59fcde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:36:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:36:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1a4295d6008243abdf35fb8146dab8fe7c4718853333d7e619b33a96ee59fcde"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a4295d6008243abdf35fb8146dab8fe7c4718853333d7e619b33a96ee59fcde","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cae086f2dfc373e5aad98209a1a1cc4a7a4fd8bab9b2c0e3f0785b8028ec7c58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:36:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:36:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cae086f2dfc373e5aad98209a1a1cc4a7a4fd8bab9b2c0e3f0785b8028ec7c58"} {"level":"info","ts":"2026-07-14T23:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cae086f2dfc373e5aad98209a1a1cc4a7a4fd8bab9b2c0e3f0785b8028ec7c58","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a4295d6008243abdf35fb8146dab8fe7c4718853333d7e619b33a96ee59fcde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:36:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:36:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a4295d6008243abdf35fb8146dab8fe7c4718853333d7e619b33a96ee59fcde","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cae086f2dfc373e5aad98209a1a1cc4a7a4fd8bab9b2c0e3f0785b8028ec7c58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:36:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:36:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cae086f2dfc373e5aad98209a1a1cc4a7a4fd8bab9b2c0e3f0785b8028ec7c58"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a4295d6008243abdf35fb8146dab8fe7c4718853333d7e619b33a96ee59fcde"} {"level":"info","ts":"2026-07-14T23:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cae086f2dfc373e5aad98209a1a1cc4a7a4fd8bab9b2c0e3f0785b8028ec7c58","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a4295d6008243abdf35fb8146dab8fe7c4718853333d7e619b33a96ee59fcde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:36:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:36:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1a4295d6008243abdf35fb8146dab8fe7c4718853333d7e619b33a96ee59fcde"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a4295d6008243abdf35fb8146dab8fe7c4718853333d7e619b33a96ee59fcde","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cae086f2dfc373e5aad98209a1a1cc4a7a4fd8bab9b2c0e3f0785b8028ec7c58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:36:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:36:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cae086f2dfc373e5aad98209a1a1cc4a7a4fd8bab9b2c0e3f0785b8028ec7c58"} {"level":"info","ts":"2026-07-14T23:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cae086f2dfc373e5aad98209a1a1cc4a7a4fd8bab9b2c0e3f0785b8028ec7c58","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a4295d6008243abdf35fb8146dab8fe7c4718853333d7e619b33a96ee59fcde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:36:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:36:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a4295d6008243abdf35fb8146dab8fe7c4718853333d7e619b33a96ee59fcde"} {"level":"info","ts":"2026-07-14T23:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a4295d6008243abdf35fb8146dab8fe7c4718853333d7e619b33a96ee59fcde","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cae086f2dfc373e5aad98209a1a1cc4a7a4fd8bab9b2c0e3f0785b8028ec7c58","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a4295d6008243abdf35fb8146dab8fe7c4718853333d7e619b33a96ee59fcde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:36:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:36:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1a4295d6008243abdf35fb8146dab8fe7c4718853333d7e619b33a96ee59fcde"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a4295d6008243abdf35fb8146dab8fe7c4718853333d7e619b33a96ee59fcde","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cae086f2dfc373e5aad98209a1a1cc4a7a4fd8bab9b2c0e3f0785b8028ec7c58","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a4295d6008243abdf35fb8146dab8fe7c4718853333d7e619b33a96ee59fcde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:36:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:36:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1a4295d6008243abdf35fb8146dab8fe7c4718853333d7e619b33a96ee59fcde"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cae086f2dfc373e5aad98209a1a1cc4a7a4fd8bab9b2c0e3f0785b8028ec7c58"} {"level":"error","ts":"2026-07-14T23:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1a4295d6008243abdf35fb8146dab8fe7c4718853333d7e619b33a96ee59fcde","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1a4295d6008243abdf35fb8146dab8fe7c4718853333d7e619b33a96ee59fcde\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T23:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a4295d6008243abdf35fb8146dab8fe7c4718853333d7e619b33a96ee59fcde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:36:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:36:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a4295d6008243abdf35fb8146dab8fe7c4718853333d7e619b33a96ee59fcde","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a4295d6008243abdf35fb8146dab8fe7c4718853333d7e619b33a96ee59fcde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:36:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:36:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a4295d6008243abdf35fb8146dab8fe7c4718853333d7e619b33a96ee59fcde"} {"level":"error","ts":"2026-07-14T23:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1a4295d6008243abdf35fb8146dab8fe7c4718853333d7e619b33a96ee59fcde","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1a4295d6008243abdf35fb8146dab8fe7c4718853333d7e619b33a96ee59fcde\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T23:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cae086f2dfc373e5aad98209a1a1cc4a7a4fd8bab9b2c0e3f0785b8028ec7c58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:36:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:36:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cae086f2dfc373e5aad98209a1a1cc4a7a4fd8bab9b2c0e3f0785b8028ec7c58"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cae086f2dfc373e5aad98209a1a1cc4a7a4fd8bab9b2c0e3f0785b8028ec7c58","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1a4295d6008243abdf35fb8146dab8fe7c4718853333d7e619b33a96ee59fcde","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cae086f2dfc373e5aad98209a1a1cc4a7a4fd8bab9b2c0e3f0785b8028ec7c58","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a4295d6008243abdf35fb8146dab8fe7c4718853333d7e619b33a96ee59fcde"} {"level":"info","ts":"2026-07-14T23:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cae086f2dfc373e5aad98209a1a1cc4a7a4fd8bab9b2c0e3f0785b8028ec7c58"} {"level":"debug","ts":"2026-07-14T23:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a4295d6008243abdf35fb8146dab8fe7c4718853333d7e619b33a96ee59fcde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:36:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:36:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1a4295d6008243abdf35fb8146dab8fe7c4718853333d7e619b33a96ee59fcde"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a4295d6008243abdf35fb8146dab8fe7c4718853333d7e619b33a96ee59fcde","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d52d4dc5f9fcfa984fe8e45666add087fb70ad8f7e7489f647af4e77c13cff79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:36:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:36:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d52d4dc5f9fcfa984fe8e45666add087fb70ad8f7e7489f647af4e77c13cff79"} {"level":"info","ts":"2026-07-14T23:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d52d4dc5f9fcfa984fe8e45666add087fb70ad8f7e7489f647af4e77c13cff79","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a4295d6008243abdf35fb8146dab8fe7c4718853333d7e619b33a96ee59fcde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:36:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:36:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a4295d6008243abdf35fb8146dab8fe7c4718853333d7e619b33a96ee59fcde","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d52d4dc5f9fcfa984fe8e45666add087fb70ad8f7e7489f647af4e77c13cff79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:36:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:36:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d52d4dc5f9fcfa984fe8e45666add087fb70ad8f7e7489f647af4e77c13cff79"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a4295d6008243abdf35fb8146dab8fe7c4718853333d7e619b33a96ee59fcde"} {"level":"info","ts":"2026-07-14T23:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d52d4dc5f9fcfa984fe8e45666add087fb70ad8f7e7489f647af4e77c13cff79","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a4295d6008243abdf35fb8146dab8fe7c4718853333d7e619b33a96ee59fcde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:36:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:36:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1a4295d6008243abdf35fb8146dab8fe7c4718853333d7e619b33a96ee59fcde"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d52d4dc5f9fcfa984fe8e45666add087fb70ad8f7e7489f647af4e77c13cff79"} {"level":"info","ts":"2026-07-14T23:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a4295d6008243abdf35fb8146dab8fe7c4718853333d7e619b33a96ee59fcde","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d52d4dc5f9fcfa984fe8e45666add087fb70ad8f7e7489f647af4e77c13cff79","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a4295d6008243abdf35fb8146dab8fe7c4718853333d7e619b33a96ee59fcde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:36:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:36:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a4295d6008243abdf35fb8146dab8fe7c4718853333d7e619b33a96ee59fcde","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1a4295d6008243abdf35fb8146dab8fe7c4718853333d7e619b33a96ee59fcde","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a4295d6008243abdf35fb8146dab8fe7c4718853333d7e619b33a96ee59fcde"} {"level":"debug","ts":"2026-07-14T23:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a4295d6008243abdf35fb8146dab8fe7c4718853333d7e619b33a96ee59fcde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:36:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:36:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1a4295d6008243abdf35fb8146dab8fe7c4718853333d7e619b33a96ee59fcde"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a4295d6008243abdf35fb8146dab8fe7c4718853333d7e619b33a96ee59fcde","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1a4295d6008243abdf35fb8146dab8fe7c4718853333d7e619b33a96ee59fcde","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d52d4dc5f9fcfa984fe8e45666add087fb70ad8f7e7489f647af4e77c13cff79"} {"level":"debug","ts":"2026-07-14T23:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fce480d53bf9fc7ca5dc52e785b753389c4af79b8270757b306be6734c57a974","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:36:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:36:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fce480d53bf9fc7ca5dc52e785b753389c4af79b8270757b306be6734c57a974","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fce480d53bf9fc7ca5dc52e785b753389c4af79b8270757b306be6734c57a974","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a4295d6008243abdf35fb8146dab8fe7c4718853333d7e619b33a96ee59fcde"} {"level":"debug","ts":"2026-07-14T23:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fce480d53bf9fc7ca5dc52e785b753389c4af79b8270757b306be6734c57a974","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:36:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:36:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fce480d53bf9fc7ca5dc52e785b753389c4af79b8270757b306be6734c57a974","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fce480d53bf9fc7ca5dc52e785b753389c4af79b8270757b306be6734c57a974","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fce480d53bf9fc7ca5dc52e785b753389c4af79b8270757b306be6734c57a974"} {"level":"debug","ts":"2026-07-14T23:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fce480d53bf9fc7ca5dc52e785b753389c4af79b8270757b306be6734c57a974","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fce480d53bf9fc7ca5dc52e785b753389c4af79b8270757b306be6734c57a974"} {"level":"debug","ts":"2026-07-14T23:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78ab0a6cadf8b306cba60a4f78e53b9d863755455106d12abbe4c911f7c81fa0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:36:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:36:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78ab0a6cadf8b306cba60a4f78e53b9d863755455106d12abbe4c911f7c81fa0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78ab0a6cadf8b306cba60a4f78e53b9d863755455106d12abbe4c911f7c81fa0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78ab0a6cadf8b306cba60a4f78e53b9d863755455106d12abbe4c911f7c81fa0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78ab0a6cadf8b306cba60a4f78e53b9d863755455106d12abbe4c911f7c81fa0"} {"level":"debug","ts":"2026-07-14T23:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78ab0a6cadf8b306cba60a4f78e53b9d863755455106d12abbe4c911f7c81fa0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78ab0a6cadf8b306cba60a4f78e53b9d863755455106d12abbe4c911f7c81fa0"} {"level":"debug","ts":"2026-07-14T23:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fce480d53bf9fc7ca5dc52e785b753389c4af79b8270757b306be6734c57a974","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:36:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:36:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fce480d53bf9fc7ca5dc52e785b753389c4af79b8270757b306be6734c57a974"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fce480d53bf9fc7ca5dc52e785b753389c4af79b8270757b306be6734c57a974","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fce480d53bf9fc7ca5dc52e785b753389c4af79b8270757b306be6734c57a974","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:36:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:36:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fce480d53bf9fc7ca5dc52e785b753389c4af79b8270757b306be6734c57a974","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fce480d53bf9fc7ca5dc52e785b753389c4af79b8270757b306be6734c57a974","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fce480d53bf9fc7ca5dc52e785b753389c4af79b8270757b306be6734c57a974","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78ab0a6cadf8b306cba60a4f78e53b9d863755455106d12abbe4c911f7c81fa0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:36:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:36:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["78ab0a6cadf8b306cba60a4f78e53b9d863755455106d12abbe4c911f7c81fa0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fce480d53bf9fc7ca5dc52e785b753389c4af79b8270757b306be6734c57a974"} {"level":"info","ts":"2026-07-14T23:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78ab0a6cadf8b306cba60a4f78e53b9d863755455106d12abbe4c911f7c81fa0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78ab0a6cadf8b306cba60a4f78e53b9d863755455106d12abbe4c911f7c81fa0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"712741aa819cb66b745e34e3aba91d11f34a9bae087a7ddf184faf1ee4c638aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:36:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:36:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fce480d53bf9fc7ca5dc52e785b753389c4af79b8270757b306be6734c57a974"} {"level":"info","ts":"2026-07-14T23:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"712741aa819cb66b745e34e3aba91d11f34a9bae087a7ddf184faf1ee4c638aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fce480d53bf9fc7ca5dc52e785b753389c4af79b8270757b306be6734c57a974","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:36:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:36:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fce480d53bf9fc7ca5dc52e785b753389c4af79b8270757b306be6734c57a974"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fce480d53bf9fc7ca5dc52e785b753389c4af79b8270757b306be6734c57a974","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88bd16e07a6586e92e38bf7831bb7983dc525c386d25d9cad553e35be891a45b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:36:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:36:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78ab0a6cadf8b306cba60a4f78e53b9d863755455106d12abbe4c911f7c81fa0"} {"level":"info","ts":"2026-07-14T23:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88bd16e07a6586e92e38bf7831bb7983dc525c386d25d9cad553e35be891a45b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"712741aa819cb66b745e34e3aba91d11f34a9bae087a7ddf184faf1ee4c638aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:36:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:36:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"712741aa819cb66b745e34e3aba91d11f34a9bae087a7ddf184faf1ee4c638aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fce480d53bf9fc7ca5dc52e785b753389c4af79b8270757b306be6734c57a974","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88bd16e07a6586e92e38bf7831bb7983dc525c386d25d9cad553e35be891a45b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"712741aa819cb66b745e34e3aba91d11f34a9bae087a7ddf184faf1ee4c638aa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/712741aa819cb66b745e34e3aba91d11f34a9bae087a7ddf184faf1ee4c638aa"} {"level":"debug","ts":"2026-07-14T23:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"712741aa819cb66b745e34e3aba91d11f34a9bae087a7ddf184faf1ee4c638aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:36:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:36:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["712741aa819cb66b745e34e3aba91d11f34a9bae087a7ddf184faf1ee4c638aa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"712741aa819cb66b745e34e3aba91d11f34a9bae087a7ddf184faf1ee4c638aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88bd16e07a6586e92e38bf7831bb7983dc525c386d25d9cad553e35be891a45b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:36:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:36:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88bd16e07a6586e92e38bf7831bb7983dc525c386d25d9cad553e35be891a45b"} {"level":"info","ts":"2026-07-14T23:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88bd16e07a6586e92e38bf7831bb7983dc525c386d25d9cad553e35be891a45b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"712741aa819cb66b745e34e3aba91d11f34a9bae087a7ddf184faf1ee4c638aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88bd16e07a6586e92e38bf7831bb7983dc525c386d25d9cad553e35be891a45b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:36:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:36:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["88bd16e07a6586e92e38bf7831bb7983dc525c386d25d9cad553e35be891a45b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88bd16e07a6586e92e38bf7831bb7983dc525c386d25d9cad553e35be891a45b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f5d8178ddeba6a3dfbb6ef0dee0ccff2410abad57be465bdfd0d4f7d58d965c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:36:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:36:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fce480d53bf9fc7ca5dc52e785b753389c4af79b8270757b306be6734c57a974"} {"level":"info","ts":"2026-07-14T23:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f5d8178ddeba6a3dfbb6ef0dee0ccff2410abad57be465bdfd0d4f7d58d965c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88bd16e07a6586e92e38bf7831bb7983dc525c386d25d9cad553e35be891a45b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f5d8178ddeba6a3dfbb6ef0dee0ccff2410abad57be465bdfd0d4f7d58d965c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f5d8178ddeba6a3dfbb6ef0dee0ccff2410abad57be465bdfd0d4f7d58d965c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/712741aa819cb66b745e34e3aba91d11f34a9bae087a7ddf184faf1ee4c638aa"} {"level":"debug","ts":"2026-07-14T23:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f5d8178ddeba6a3dfbb6ef0dee0ccff2410abad57be465bdfd0d4f7d58d965c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88bd16e07a6586e92e38bf7831bb7983dc525c386d25d9cad553e35be891a45b"} {"level":"debug","ts":"2026-07-14T23:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f5d8178ddeba6a3dfbb6ef0dee0ccff2410abad57be465bdfd0d4f7d58d965c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:36:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:36:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f5d8178ddeba6a3dfbb6ef0dee0ccff2410abad57be465bdfd0d4f7d58d965c"} {"level":"info","ts":"2026-07-14T23:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f5d8178ddeba6a3dfbb6ef0dee0ccff2410abad57be465bdfd0d4f7d58d965c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f5d8178ddeba6a3dfbb6ef0dee0ccff2410abad57be465bdfd0d4f7d58d965c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:36:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:36:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f5d8178ddeba6a3dfbb6ef0dee0ccff2410abad57be465bdfd0d4f7d58d965c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f5d8178ddeba6a3dfbb6ef0dee0ccff2410abad57be465bdfd0d4f7d58d965c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f5d8178ddeba6a3dfbb6ef0dee0ccff2410abad57be465bdfd0d4f7d58d965c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:36:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:36:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f5d8178ddeba6a3dfbb6ef0dee0ccff2410abad57be465bdfd0d4f7d58d965c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f5d8178ddeba6a3dfbb6ef0dee0ccff2410abad57be465bdfd0d4f7d58d965c"} {"level":"debug","ts":"2026-07-14T23:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f5d8178ddeba6a3dfbb6ef0dee0ccff2410abad57be465bdfd0d4f7d58d965c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f5d8178ddeba6a3dfbb6ef0dee0ccff2410abad57be465bdfd0d4f7d58d965c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f5d8178ddeba6a3dfbb6ef0dee0ccff2410abad57be465bdfd0d4f7d58d965c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f5d8178ddeba6a3dfbb6ef0dee0ccff2410abad57be465bdfd0d4f7d58d965c"} {"level":"debug","ts":"2026-07-14T23:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f5d8178ddeba6a3dfbb6ef0dee0ccff2410abad57be465bdfd0d4f7d58d965c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"10050c35d251c853dfd4de01891d0a73d379cf0a21c8f8e5fc79e9e44fa396a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:36:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:36:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f5d8178ddeba6a3dfbb6ef0dee0ccff2410abad57be465bdfd0d4f7d58d965c"} {"level":"info","ts":"2026-07-14T23:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"10050c35d251c853dfd4de01891d0a73d379cf0a21c8f8e5fc79e9e44fa396a0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"10050c35d251c853dfd4de01891d0a73d379cf0a21c8f8e5fc79e9e44fa396a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:36:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:36:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"10050c35d251c853dfd4de01891d0a73d379cf0a21c8f8e5fc79e9e44fa396a0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"10050c35d251c853dfd4de01891d0a73d379cf0a21c8f8e5fc79e9e44fa396a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:36:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:36:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-14T23:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"10050c35d251c853dfd4de01891d0a73d379cf0a21c8f8e5fc79e9e44fa396a0","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"10050c35d251c853dfd4de01891d0a73d379cf0a21c8f8e5fc79e9e44fa396a0\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T23:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"10050c35d251c853dfd4de01891d0a73d379cf0a21c8f8e5fc79e9e44fa396a0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"10050c35d251c853dfd4de01891d0a73d379cf0a21c8f8e5fc79e9e44fa396a0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/10050c35d251c853dfd4de01891d0a73d379cf0a21c8f8e5fc79e9e44fa396a0"} {"level":"info","ts":"2026-07-14T23:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/10050c35d251c853dfd4de01891d0a73d379cf0a21c8f8e5fc79e9e44fa396a0"} {"level":"debug","ts":"2026-07-14T23:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f5d8178ddeba6a3dfbb6ef0dee0ccff2410abad57be465bdfd0d4f7d58d965c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:36:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:36:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f5d8178ddeba6a3dfbb6ef0dee0ccff2410abad57be465bdfd0d4f7d58d965c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f5d8178ddeba6a3dfbb6ef0dee0ccff2410abad57be465bdfd0d4f7d58d965c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f5d8178ddeba6a3dfbb6ef0dee0ccff2410abad57be465bdfd0d4f7d58d965c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5197d1b15f03beaa902128967c5f14473205b7efb6ebf4f780f54319abe506d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:36:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:36:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f5d8178ddeba6a3dfbb6ef0dee0ccff2410abad57be465bdfd0d4f7d58d965c"} {"level":"info","ts":"2026-07-14T23:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5197d1b15f03beaa902128967c5f14473205b7efb6ebf4f780f54319abe506d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5197d1b15f03beaa902128967c5f14473205b7efb6ebf4f780f54319abe506d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:36:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:36:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5197d1b15f03beaa902128967c5f14473205b7efb6ebf4f780f54319abe506d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"10050c35d251c853dfd4de01891d0a73d379cf0a21c8f8e5fc79e9e44fa396a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:36:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:36:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["10050c35d251c853dfd4de01891d0a73d379cf0a21c8f8e5fc79e9e44fa396a0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5197d1b15f03beaa902128967c5f14473205b7efb6ebf4f780f54319abe506d9"} {"level":"info","ts":"2026-07-14T23:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"10050c35d251c853dfd4de01891d0a73d379cf0a21c8f8e5fc79e9e44fa396a0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5197d1b15f03beaa902128967c5f14473205b7efb6ebf4f780f54319abe506d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"10050c35d251c853dfd4de01891d0a73d379cf0a21c8f8e5fc79e9e44fa396a0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5197d1b15f03beaa902128967c5f14473205b7efb6ebf4f780f54319abe506d9"} {"level":"debug","ts":"2026-07-14T23:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5197d1b15f03beaa902128967c5f14473205b7efb6ebf4f780f54319abe506d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:36:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:36:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5197d1b15f03beaa902128967c5f14473205b7efb6ebf4f780f54319abe506d9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/10050c35d251c853dfd4de01891d0a73d379cf0a21c8f8e5fc79e9e44fa396a0"} {"level":"info","ts":"2026-07-14T23:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5197d1b15f03beaa902128967c5f14473205b7efb6ebf4f780f54319abe506d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5197d1b15f03beaa902128967c5f14473205b7efb6ebf4f780f54319abe506d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:36:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:36:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5197d1b15f03beaa902128967c5f14473205b7efb6ebf4f780f54319abe506d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5197d1b15f03beaa902128967c5f14473205b7efb6ebf4f780f54319abe506d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5197d1b15f03beaa902128967c5f14473205b7efb6ebf4f780f54319abe506d9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5197d1b15f03beaa902128967c5f14473205b7efb6ebf4f780f54319abe506d9"} {"level":"debug","ts":"2026-07-14T23:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"042471f975b0ed4d042f6232264c48bbf7e816195824969258946ca0d03cfe3a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:36:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:36:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"042471f975b0ed4d042f6232264c48bbf7e816195824969258946ca0d03cfe3a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5197d1b15f03beaa902128967c5f14473205b7efb6ebf4f780f54319abe506d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"042471f975b0ed4d042f6232264c48bbf7e816195824969258946ca0d03cfe3a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5197d1b15f03beaa902128967c5f14473205b7efb6ebf4f780f54319abe506d9"} {"level":"debug","ts":"2026-07-14T23:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"042471f975b0ed4d042f6232264c48bbf7e816195824969258946ca0d03cfe3a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:36:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:36:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"042471f975b0ed4d042f6232264c48bbf7e816195824969258946ca0d03cfe3a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"042471f975b0ed4d042f6232264c48bbf7e816195824969258946ca0d03cfe3a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/042471f975b0ed4d042f6232264c48bbf7e816195824969258946ca0d03cfe3a"} {"level":"debug","ts":"2026-07-14T23:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"042471f975b0ed4d042f6232264c48bbf7e816195824969258946ca0d03cfe3a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5197d1b15f03beaa902128967c5f14473205b7efb6ebf4f780f54319abe506d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:36:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:36:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5197d1b15f03beaa902128967c5f14473205b7efb6ebf4f780f54319abe506d9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/042471f975b0ed4d042f6232264c48bbf7e816195824969258946ca0d03cfe3a"} {"level":"info","ts":"2026-07-14T23:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5197d1b15f03beaa902128967c5f14473205b7efb6ebf4f780f54319abe506d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5197d1b15f03beaa902128967c5f14473205b7efb6ebf4f780f54319abe506d9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5197d1b15f03beaa902128967c5f14473205b7efb6ebf4f780f54319abe506d9"} {"level":"debug","ts":"2026-07-14T23:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"042471f975b0ed4d042f6232264c48bbf7e816195824969258946ca0d03cfe3a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:36:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:36:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["042471f975b0ed4d042f6232264c48bbf7e816195824969258946ca0d03cfe3a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"042471f975b0ed4d042f6232264c48bbf7e816195824969258946ca0d03cfe3a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"042471f975b0ed4d042f6232264c48bbf7e816195824969258946ca0d03cfe3a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:36:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:36:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"042471f975b0ed4d042f6232264c48bbf7e816195824969258946ca0d03cfe3a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"042471f975b0ed4d042f6232264c48bbf7e816195824969258946ca0d03cfe3a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"042471f975b0ed4d042f6232264c48bbf7e816195824969258946ca0d03cfe3a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/042471f975b0ed4d042f6232264c48bbf7e816195824969258946ca0d03cfe3a"} {"level":"debug","ts":"2026-07-14T23:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"042471f975b0ed4d042f6232264c48bbf7e816195824969258946ca0d03cfe3a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/042471f975b0ed4d042f6232264c48bbf7e816195824969258946ca0d03cfe3a"} {"level":"debug","ts":"2026-07-14T23:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"042471f975b0ed4d042f6232264c48bbf7e816195824969258946ca0d03cfe3a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:36:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:36:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["042471f975b0ed4d042f6232264c48bbf7e816195824969258946ca0d03cfe3a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"042471f975b0ed4d042f6232264c48bbf7e816195824969258946ca0d03cfe3a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"042471f975b0ed4d042f6232264c48bbf7e816195824969258946ca0d03cfe3a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:36:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:36:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"042471f975b0ed4d042f6232264c48bbf7e816195824969258946ca0d03cfe3a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"042471f975b0ed4d042f6232264c48bbf7e816195824969258946ca0d03cfe3a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"042471f975b0ed4d042f6232264c48bbf7e816195824969258946ca0d03cfe3a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/042471f975b0ed4d042f6232264c48bbf7e816195824969258946ca0d03cfe3a"} {"level":"debug","ts":"2026-07-14T23:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"042471f975b0ed4d042f6232264c48bbf7e816195824969258946ca0d03cfe3a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/042471f975b0ed4d042f6232264c48bbf7e816195824969258946ca0d03cfe3a"} {"level":"debug","ts":"2026-07-14T23:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"042471f975b0ed4d042f6232264c48bbf7e816195824969258946ca0d03cfe3a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:36:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:36:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["042471f975b0ed4d042f6232264c48bbf7e816195824969258946ca0d03cfe3a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"042471f975b0ed4d042f6232264c48bbf7e816195824969258946ca0d03cfe3a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"042471f975b0ed4d042f6232264c48bbf7e816195824969258946ca0d03cfe3a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/042471f975b0ed4d042f6232264c48bbf7e816195824969258946ca0d03cfe3a"} {"level":"info","ts":"2026-07-14T23:36:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2420110c-e757-4c36-b489-7a6acc393619","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:42898","PortSpecifier":{"PortValue":42898}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2420110c-e757-4c36-b489-7a6acc393619","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-d62786.apps.e22d099d-c588-4592-b2f9-ac051f108d63.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T23:36:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2420110c-e757-4c36-b489-7a6acc393619","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:42898","PortSpecifier":{"PortValue":42898}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784072209,"nanos":974894112},"http":{"id":"2420110c-e757-4c36-b489-7a6acc393619","method":"POST","headers":{":authority":"e2e-shared-a-d62786.apps.e22d099d-c588-4592-b2f9-ac051f108d63.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T23:36:49Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2420110c-e757-4c36-b489-7a6acc393619","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T23:36:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2420110c-e757-4c36-b489-7a6acc393619","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9f6cdc29-bd79-4ecd-b194-a17f6a500fce","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=97f58e18-e78c-4dbe-93a2-70a7ad5158e0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ac051f108d63"]}} {"level":"debug","ts":"2026-07-14T23:36:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2420110c-e757-4c36-b489-7a6acc393619","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ac051f108d63"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=97f58e18-e78c-4dbe-93a2-70a7ad5158e0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9f6cdc29-bd79-4ecd-b194-a17f6a500fce","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5fad47ffc1d8c69c4202dba81340880877bd8073d47e151e598706074623c291"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-d62786.apps.e22d099d-c588-4592-b2f9-ac051f108d63.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T23:36:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2420110c-e757-4c36-b489-7a6acc393619","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T23:36:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2420110c-e757-4c36-b489-7a6acc393619","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T23:36:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2420110c-e757-4c36-b489-7a6acc393619","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d62786/auth-test-model-d62786\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d62786/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T23:36:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2420110c-e757-4c36-b489-7a6acc393619","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T23:36:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2420110c-e757-4c36-b489-7a6acc393619","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T23:36:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2420110c-e757-4c36-b489-7a6acc393619","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-14T23:36:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2420110c-e757-4c36-b489-7a6acc393619","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T23:36:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2420110c-e757-4c36-b489-7a6acc393619","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T23:36:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6286a7bd-d459-4b69-9db0-f042ee082d7a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:45692","PortSpecifier":{"PortValue":45692}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6286a7bd-d459-4b69-9db0-f042ee082d7a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-638b58.apps.e22d099d-c588-4592-b2f9-ac051f108d63.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T23:36:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6286a7bd-d459-4b69-9db0-f042ee082d7a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:45692","PortSpecifier":{"PortValue":45692}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784072210,"nanos":32254063},"http":{"id":"6286a7bd-d459-4b69-9db0-f042ee082d7a","method":"POST","headers":{":authority":"e2e-shared-b-638b58.apps.e22d099d-c588-4592-b2f9-ac051f108d63.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T23:36:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6286a7bd-d459-4b69-9db0-f042ee082d7a","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T23:36:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6286a7bd-d459-4b69-9db0-f042ee082d7a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9f6cdc29-bd79-4ecd-b194-a17f6a500fce","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=97f58e18-e78c-4dbe-93a2-70a7ad5158e0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ac051f108d63"]}} {"level":"debug","ts":"2026-07-14T23:36:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6286a7bd-d459-4b69-9db0-f042ee082d7a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ac051f108d63"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=97f58e18-e78c-4dbe-93a2-70a7ad5158e0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9f6cdc29-bd79-4ecd-b194-a17f6a500fce","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"cae086f2dfc373e5aad98209a1a1cc4a7a4fd8bab9b2c0e3f0785b8028ec7c58"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-638b58.apps.e22d099d-c588-4592-b2f9-ac051f108d63.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T23:36:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6286a7bd-d459-4b69-9db0-f042ee082d7a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T23:36:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6286a7bd-d459-4b69-9db0-f042ee082d7a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T23:36:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6286a7bd-d459-4b69-9db0-f042ee082d7a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-638b58/auth-test-model-638b58\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-638b58/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T23:36:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6286a7bd-d459-4b69-9db0-f042ee082d7a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T23:36:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6286a7bd-d459-4b69-9db0-f042ee082d7a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T23:36:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6286a7bd-d459-4b69-9db0-f042ee082d7a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T23:36:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6286a7bd-d459-4b69-9db0-f042ee082d7a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T23:36:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6286a7bd-d459-4b69-9db0-f042ee082d7a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T23:36:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fe6306b9-5974-4a13-b497-2f374d66bf12","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:42904","PortSpecifier":{"PortValue":42904}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fe6306b9-5974-4a13-b497-2f374d66bf12","method":"GET","path":"/maas-api/v1/api-keys/b4bb9dde-44c9-4dd6-8938-42ad3a9c536d","host":"e2e-shared-a-d62786.apps.e22d099d-c588-4592-b2f9-ac051f108d63.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T23:36:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fe6306b9-5974-4a13-b497-2f374d66bf12","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:42904","PortSpecifier":{"PortValue":42904}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784072210,"nanos":88520684},"http":{"id":"fe6306b9-5974-4a13-b497-2f374d66bf12","method":"GET","headers":{":authority":"e2e-shared-a-d62786.apps.e22d099d-c588-4592-b2f9-ac051f108d63.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/b4bb9dde-44c9-4dd6-8938-42ad3a9c536d",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T23:36:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fe6306b9-5974-4a13-b497-2f374d66bf12","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T23:36:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fe6306b9-5974-4a13-b497-2f374d66bf12","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9f6cdc29-bd79-4ecd-b194-a17f6a500fce","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=97f58e18-e78c-4dbe-93a2-70a7ad5158e0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ac051f108d63"]}} {"level":"debug","ts":"2026-07-14T23:36:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fe6306b9-5974-4a13-b497-2f374d66bf12","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ac051f108d63"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=97f58e18-e78c-4dbe-93a2-70a7ad5158e0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9f6cdc29-bd79-4ecd-b194-a17f6a500fce","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5fad47ffc1d8c69c4202dba81340880877bd8073d47e151e598706074623c291"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-d62786.apps.e22d099d-c588-4592-b2f9-ac051f108d63.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/b4bb9dde-44c9-4dd6-8938-42ad3a9c536d",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T23:36:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fe6306b9-5974-4a13-b497-2f374d66bf12","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T23:36:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fe6306b9-5974-4a13-b497-2f374d66bf12","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T23:36:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fe6306b9-5974-4a13-b497-2f374d66bf12","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d62786/auth-test-model-d62786\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d62786/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T23:36:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fe6306b9-5974-4a13-b497-2f374d66bf12","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T23:36:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fe6306b9-5974-4a13-b497-2f374d66bf12","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T23:36:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fe6306b9-5974-4a13-b497-2f374d66bf12","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-14T23:36:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fe6306b9-5974-4a13-b497-2f374d66bf12","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T23:36:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fe6306b9-5974-4a13-b497-2f374d66bf12","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T23:36:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"92589ffe-73ff-46c2-8bf9-500a4561d688","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:45698","PortSpecifier":{"PortValue":45698}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"92589ffe-73ff-46c2-8bf9-500a4561d688","method":"GET","path":"/maas-api/v1/api-keys/b6692022-a750-4a44-b425-529737c202be","host":"e2e-shared-b-638b58.apps.e22d099d-c588-4592-b2f9-ac051f108d63.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T23:36:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"92589ffe-73ff-46c2-8bf9-500a4561d688","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:45698","PortSpecifier":{"PortValue":45698}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784072210,"nanos":123082099},"http":{"id":"92589ffe-73ff-46c2-8bf9-500a4561d688","method":"GET","headers":{":authority":"e2e-shared-b-638b58.apps.e22d099d-c588-4592-b2f9-ac051f108d63.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/b6692022-a750-4a44-b425-529737c202be",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T23:36:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"92589ffe-73ff-46c2-8bf9-500a4561d688","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T23:36:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"92589ffe-73ff-46c2-8bf9-500a4561d688","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9f6cdc29-bd79-4ecd-b194-a17f6a500fce","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=97f58e18-e78c-4dbe-93a2-70a7ad5158e0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ac051f108d63"]}} {"level":"debug","ts":"2026-07-14T23:36:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"92589ffe-73ff-46c2-8bf9-500a4561d688","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ac051f108d63"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=97f58e18-e78c-4dbe-93a2-70a7ad5158e0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9f6cdc29-bd79-4ecd-b194-a17f6a500fce","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"cae086f2dfc373e5aad98209a1a1cc4a7a4fd8bab9b2c0e3f0785b8028ec7c58"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-638b58.apps.e22d099d-c588-4592-b2f9-ac051f108d63.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/b6692022-a750-4a44-b425-529737c202be",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T23:36:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"92589ffe-73ff-46c2-8bf9-500a4561d688","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T23:36:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"92589ffe-73ff-46c2-8bf9-500a4561d688","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T23:36:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"92589ffe-73ff-46c2-8bf9-500a4561d688","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-638b58/auth-test-model-638b58\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-638b58/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T23:36:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"92589ffe-73ff-46c2-8bf9-500a4561d688","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T23:36:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"92589ffe-73ff-46c2-8bf9-500a4561d688","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T23:36:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"92589ffe-73ff-46c2-8bf9-500a4561d688","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T23:36:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"92589ffe-73ff-46c2-8bf9-500a4561d688","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T23:36:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"92589ffe-73ff-46c2-8bf9-500a4561d688","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T23:37:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8fb9eff3-e674-4e11-80a6-2570c57c12f3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:56470","PortSpecifier":{"PortValue":56470}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8fb9eff3-e674-4e11-80a6-2570c57c12f3","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-d62786.apps.e22d099d-c588-4592-b2f9-ac051f108d63.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T23:37:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8fb9eff3-e674-4e11-80a6-2570c57c12f3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:56470","PortSpecifier":{"PortValue":56470}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784072227,"nanos":319910861},"http":{"id":"8fb9eff3-e674-4e11-80a6-2570c57c12f3","method":"POST","headers":{":authority":"e2e-shared-a-d62786.apps.e22d099d-c588-4592-b2f9-ac051f108d63.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T23:37:07Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8fb9eff3-e674-4e11-80a6-2570c57c12f3","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T23:37:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8fb9eff3-e674-4e11-80a6-2570c57c12f3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9f6cdc29-bd79-4ecd-b194-a17f6a500fce","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=97f58e18-e78c-4dbe-93a2-70a7ad5158e0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ac051f108d63"]}} {"level":"debug","ts":"2026-07-14T23:37:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8fb9eff3-e674-4e11-80a6-2570c57c12f3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ac051f108d63"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=97f58e18-e78c-4dbe-93a2-70a7ad5158e0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9f6cdc29-bd79-4ecd-b194-a17f6a500fce","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5fad47ffc1d8c69c4202dba81340880877bd8073d47e151e598706074623c291"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-d62786.apps.e22d099d-c588-4592-b2f9-ac051f108d63.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T23:37:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8fb9eff3-e674-4e11-80a6-2570c57c12f3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T23:37:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8fb9eff3-e674-4e11-80a6-2570c57c12f3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T23:37:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8fb9eff3-e674-4e11-80a6-2570c57c12f3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d62786/auth-test-model-d62786\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d62786/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T23:37:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8fb9eff3-e674-4e11-80a6-2570c57c12f3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T23:37:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8fb9eff3-e674-4e11-80a6-2570c57c12f3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T23:37:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8fb9eff3-e674-4e11-80a6-2570c57c12f3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-14T23:37:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8fb9eff3-e674-4e11-80a6-2570c57c12f3","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T23:37:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8fb9eff3-e674-4e11-80a6-2570c57c12f3","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T23:37:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"68075b69-d2d6-42b8-8e14-b22401a02d3a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:36942","PortSpecifier":{"PortValue":36942}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"68075b69-d2d6-42b8-8e14-b22401a02d3a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-638b58.apps.e22d099d-c588-4592-b2f9-ac051f108d63.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T23:37:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"68075b69-d2d6-42b8-8e14-b22401a02d3a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:36942","PortSpecifier":{"PortValue":36942}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784072227,"nanos":351784123},"http":{"id":"68075b69-d2d6-42b8-8e14-b22401a02d3a","method":"POST","headers":{":authority":"e2e-shared-b-638b58.apps.e22d099d-c588-4592-b2f9-ac051f108d63.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T23:37:07Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"68075b69-d2d6-42b8-8e14-b22401a02d3a","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T23:37:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"68075b69-d2d6-42b8-8e14-b22401a02d3a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9f6cdc29-bd79-4ecd-b194-a17f6a500fce","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=97f58e18-e78c-4dbe-93a2-70a7ad5158e0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ac051f108d63"]}} {"level":"debug","ts":"2026-07-14T23:37:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"68075b69-d2d6-42b8-8e14-b22401a02d3a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ac051f108d63"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=97f58e18-e78c-4dbe-93a2-70a7ad5158e0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9f6cdc29-bd79-4ecd-b194-a17f6a500fce","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"cae086f2dfc373e5aad98209a1a1cc4a7a4fd8bab9b2c0e3f0785b8028ec7c58"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-638b58.apps.e22d099d-c588-4592-b2f9-ac051f108d63.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T23:37:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"68075b69-d2d6-42b8-8e14-b22401a02d3a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T23:37:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"68075b69-d2d6-42b8-8e14-b22401a02d3a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T23:37:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"68075b69-d2d6-42b8-8e14-b22401a02d3a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-638b58/auth-test-model-638b58\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-638b58/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T23:37:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"68075b69-d2d6-42b8-8e14-b22401a02d3a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T23:37:07Z","logger":"authorino.service.auth.authpipeline","msg":"skipping config","request id":"68075b69-d2d6-42b8-8e14-b22401a02d3a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"reason":"context canceled"} {"level":"debug","ts":"2026-07-14T23:37:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"68075b69-d2d6-42b8-8e14-b22401a02d3a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T23:37:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"68075b69-d2d6-42b8-8e14-b22401a02d3a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T23:37:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"68075b69-d2d6-42b8-8e14-b22401a02d3a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T23:37:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"68075b69-d2d6-42b8-8e14-b22401a02d3a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T23:37:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3b2f0b92-0d13-4f9d-8b80-d4565efce7f1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:56486","PortSpecifier":{"PortValue":56486}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3b2f0b92-0d13-4f9d-8b80-d4565efce7f1","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-d62786.apps.e22d099d-c588-4592-b2f9-ac051f108d63.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T23:37:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3b2f0b92-0d13-4f9d-8b80-d4565efce7f1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:56486","PortSpecifier":{"PortValue":56486}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784072227,"nanos":395792866},"http":{"id":"3b2f0b92-0d13-4f9d-8b80-d4565efce7f1","method":"GET","headers":{":authority":"e2e-shared-a-d62786.apps.e22d099d-c588-4592-b2f9-ac051f108d63.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T23:37:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3b2f0b92-0d13-4f9d-8b80-d4565efce7f1","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1dv2iSfgjmPV3XzpZ_xiUPdmAAaPdmDf7YZujPFWC3EFuJ9zDT0AkVyeWlSuA"} {"level":"debug","ts":"2026-07-14T23:37:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3b2f0b92-0d13-4f9d-8b80-d4565efce7f1","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d62786.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1dv2iSfgjmPV3XzpZ_xiUPdmAAaPdmDf7YZujPFWC3EFuJ9zDT0AkVyeWlSuA\"}"} {"level":"debug","ts":"2026-07-14T23:37:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3b2f0b92-0d13-4f9d-8b80-d4565efce7f1","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d62786.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"325856dd-aad4-49d7-a977-911ab2ac85c8","keyName":"e2e-auth-iso-a-0004fb","subscription":"e2e-auth-iso-b7e71d","tenant":"e2e-shared-a-d62786","userId":"325856dd-aad4-49d7-a977-911ab2ac85c8","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T23:37:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3b2f0b92-0d13-4f9d-8b80-d4565efce7f1","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T23:37:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3b2f0b92-0d13-4f9d-8b80-d4565efce7f1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T23:37:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3b2f0b92-0d13-4f9d-8b80-d4565efce7f1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T23:37:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3b2f0b92-0d13-4f9d-8b80-d4565efce7f1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d62786/auth-test-model-d62786\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d62786/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T23:37:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3b2f0b92-0d13-4f9d-8b80-d4565efce7f1","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T23:37:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3b2f0b92-0d13-4f9d-8b80-d4565efce7f1","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T23:37:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3b2f0b92-0d13-4f9d-8b80-d4565efce7f1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-14T23:37:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3b2f0b92-0d13-4f9d-8b80-d4565efce7f1","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-b7e71d"} {"level":"info","ts":"2026-07-14T23:37:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3b2f0b92-0d13-4f9d-8b80-d4565efce7f1","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T23:37:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3b2f0b92-0d13-4f9d-8b80-d4565efce7f1","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T23:37:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5620a9d9-8e55-4ff3-9957-9f8ae0041890","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:46544","PortSpecifier":{"PortValue":46544}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5620a9d9-8e55-4ff3-9957-9f8ae0041890","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-d62786.apps.e22d099d-c588-4592-b2f9-ac051f108d63.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T23:37:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5620a9d9-8e55-4ff3-9957-9f8ae0041890","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:46544","PortSpecifier":{"PortValue":46544}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784072244,"nanos":546677540},"http":{"id":"5620a9d9-8e55-4ff3-9957-9f8ae0041890","method":"POST","headers":{":authority":"e2e-shared-a-d62786.apps.e22d099d-c588-4592-b2f9-ac051f108d63.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T23:37:24Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5620a9d9-8e55-4ff3-9957-9f8ae0041890","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T23:37:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5620a9d9-8e55-4ff3-9957-9f8ae0041890","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9f6cdc29-bd79-4ecd-b194-a17f6a500fce","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=97f58e18-e78c-4dbe-93a2-70a7ad5158e0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ac051f108d63"]}} {"level":"debug","ts":"2026-07-14T23:37:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5620a9d9-8e55-4ff3-9957-9f8ae0041890","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ac051f108d63"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=97f58e18-e78c-4dbe-93a2-70a7ad5158e0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9f6cdc29-bd79-4ecd-b194-a17f6a500fce","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5fad47ffc1d8c69c4202dba81340880877bd8073d47e151e598706074623c291"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-d62786.apps.e22d099d-c588-4592-b2f9-ac051f108d63.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T23:37:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5620a9d9-8e55-4ff3-9957-9f8ae0041890","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T23:37:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5620a9d9-8e55-4ff3-9957-9f8ae0041890","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T23:37:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5620a9d9-8e55-4ff3-9957-9f8ae0041890","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d62786/auth-test-model-d62786\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d62786/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T23:37:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5620a9d9-8e55-4ff3-9957-9f8ae0041890","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T23:37:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5620a9d9-8e55-4ff3-9957-9f8ae0041890","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T23:37:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5620a9d9-8e55-4ff3-9957-9f8ae0041890","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T23:37:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5620a9d9-8e55-4ff3-9957-9f8ae0041890","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T23:37:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5620a9d9-8e55-4ff3-9957-9f8ae0041890","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T23:37:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"081a6bf7-804e-4a86-bd60-8e449db9ad8c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:48700","PortSpecifier":{"PortValue":48700}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"081a6bf7-804e-4a86-bd60-8e449db9ad8c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-638b58.apps.e22d099d-c588-4592-b2f9-ac051f108d63.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T23:37:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"081a6bf7-804e-4a86-bd60-8e449db9ad8c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:48700","PortSpecifier":{"PortValue":48700}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784072244,"nanos":578065869},"http":{"id":"081a6bf7-804e-4a86-bd60-8e449db9ad8c","method":"POST","headers":{":authority":"e2e-shared-b-638b58.apps.e22d099d-c588-4592-b2f9-ac051f108d63.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T23:37:24Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"081a6bf7-804e-4a86-bd60-8e449db9ad8c","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T23:37:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"081a6bf7-804e-4a86-bd60-8e449db9ad8c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9f6cdc29-bd79-4ecd-b194-a17f6a500fce","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=97f58e18-e78c-4dbe-93a2-70a7ad5158e0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ac051f108d63"]}} {"level":"debug","ts":"2026-07-14T23:37:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"081a6bf7-804e-4a86-bd60-8e449db9ad8c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ac051f108d63"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=97f58e18-e78c-4dbe-93a2-70a7ad5158e0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9f6cdc29-bd79-4ecd-b194-a17f6a500fce","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"cae086f2dfc373e5aad98209a1a1cc4a7a4fd8bab9b2c0e3f0785b8028ec7c58"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-638b58.apps.e22d099d-c588-4592-b2f9-ac051f108d63.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T23:37:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"081a6bf7-804e-4a86-bd60-8e449db9ad8c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T23:37:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"081a6bf7-804e-4a86-bd60-8e449db9ad8c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T23:37:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"081a6bf7-804e-4a86-bd60-8e449db9ad8c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-638b58/auth-test-model-638b58\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-638b58/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T23:37:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"081a6bf7-804e-4a86-bd60-8e449db9ad8c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T23:37:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"081a6bf7-804e-4a86-bd60-8e449db9ad8c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T23:37:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"081a6bf7-804e-4a86-bd60-8e449db9ad8c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T23:37:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"081a6bf7-804e-4a86-bd60-8e449db9ad8c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T23:37:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"081a6bf7-804e-4a86-bd60-8e449db9ad8c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T23:37:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5dd73711-7793-42ee-9d5f-f7cbc0b4c848","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:48714","PortSpecifier":{"PortValue":48714}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5dd73711-7793-42ee-9d5f-f7cbc0b4c848","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-638b58.apps.e22d099d-c588-4592-b2f9-ac051f108d63.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T23:37:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5dd73711-7793-42ee-9d5f-f7cbc0b4c848","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:48714","PortSpecifier":{"PortValue":48714}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784072244,"nanos":612996856},"http":{"id":"5dd73711-7793-42ee-9d5f-f7cbc0b4c848","method":"GET","headers":{":authority":"e2e-shared-b-638b58.apps.e22d099d-c588-4592-b2f9-ac051f108d63.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T23:37:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5dd73711-7793-42ee-9d5f-f7cbc0b4c848","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-2sknPC1NFT1sdJX9_39Djy61DE5VeVLxd5aqnrSKaOazKPNgcu1LDBabqT3d"} {"level":"debug","ts":"2026-07-14T23:37:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5dd73711-7793-42ee-9d5f-f7cbc0b4c848","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-638b58.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-2sknPC1NFT1sdJX9_39Djy61DE5VeVLxd5aqnrSKaOazKPNgcu1LDBabqT3d\"}"} {"level":"debug","ts":"2026-07-14T23:37:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5dd73711-7793-42ee-9d5f-f7cbc0b4c848","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-638b58.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}} {"level":"debug","ts":"2026-07-14T23:37:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5dd73711-7793-42ee-9d5f-f7cbc0b4c848","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"cae086f2dfc373e5aad98209a1a1cc4a7a4fd8bab9b2c0e3f0785b8028ec7c58"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-638b58.apps.e22d099d-c588-4592-b2f9-ac051f108d63.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T23:37:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5dd73711-7793-42ee-9d5f-f7cbc0b4c848","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T23:37:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"5dd73711-7793-42ee-9d5f-f7cbc0b4c848","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"} {"level":"info","ts":"2026-07-14T23:37:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5dd73711-7793-42ee-9d5f-f7cbc0b4c848","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}} {"level":"debug","ts":"2026-07-14T23:37:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5dd73711-7793-42ee-9d5f-f7cbc0b4c848","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}} {"level":"info","ts":"2026-07-14T23:37:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"274b41d5-2367-4065-94f0-d34051c5f663","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:58290","PortSpecifier":{"PortValue":58290}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"274b41d5-2367-4065-94f0-d34051c5f663","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-d62786.apps.e22d099d-c588-4592-b2f9-ac051f108d63.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T23:37:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"274b41d5-2367-4065-94f0-d34051c5f663","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:58290","PortSpecifier":{"PortValue":58290}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784072261,"nanos":812153200},"http":{"id":"274b41d5-2367-4065-94f0-d34051c5f663","method":"POST","headers":{":authority":"e2e-shared-a-d62786.apps.e22d099d-c588-4592-b2f9-ac051f108d63.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T23:37:41Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"274b41d5-2367-4065-94f0-d34051c5f663","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T23:37:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"274b41d5-2367-4065-94f0-d34051c5f663","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9f6cdc29-bd79-4ecd-b194-a17f6a500fce","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=97f58e18-e78c-4dbe-93a2-70a7ad5158e0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ac051f108d63"]}} {"level":"debug","ts":"2026-07-14T23:37:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"274b41d5-2367-4065-94f0-d34051c5f663","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ac051f108d63"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=97f58e18-e78c-4dbe-93a2-70a7ad5158e0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9f6cdc29-bd79-4ecd-b194-a17f6a500fce","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5fad47ffc1d8c69c4202dba81340880877bd8073d47e151e598706074623c291"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-d62786.apps.e22d099d-c588-4592-b2f9-ac051f108d63.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T23:37:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"274b41d5-2367-4065-94f0-d34051c5f663","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T23:37:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"274b41d5-2367-4065-94f0-d34051c5f663","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T23:37:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"274b41d5-2367-4065-94f0-d34051c5f663","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d62786/auth-test-model-d62786\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d62786/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T23:37:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"274b41d5-2367-4065-94f0-d34051c5f663","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T23:37:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"274b41d5-2367-4065-94f0-d34051c5f663","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T23:37:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"274b41d5-2367-4065-94f0-d34051c5f663","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T23:37:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"274b41d5-2367-4065-94f0-d34051c5f663","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T23:37:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"274b41d5-2367-4065-94f0-d34051c5f663","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T23:37:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d660399b-e110-41e9-bb5c-bb52d0af0b7a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:47046","PortSpecifier":{"PortValue":47046}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d660399b-e110-41e9-bb5c-bb52d0af0b7a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-638b58.apps.e22d099d-c588-4592-b2f9-ac051f108d63.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T23:37:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d660399b-e110-41e9-bb5c-bb52d0af0b7a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:47046","PortSpecifier":{"PortValue":47046}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784072261,"nanos":853269047},"http":{"id":"d660399b-e110-41e9-bb5c-bb52d0af0b7a","method":"POST","headers":{":authority":"e2e-shared-b-638b58.apps.e22d099d-c588-4592-b2f9-ac051f108d63.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T23:37:41Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d660399b-e110-41e9-bb5c-bb52d0af0b7a","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T23:37:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d660399b-e110-41e9-bb5c-bb52d0af0b7a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9f6cdc29-bd79-4ecd-b194-a17f6a500fce","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=97f58e18-e78c-4dbe-93a2-70a7ad5158e0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ac051f108d63"]}} {"level":"debug","ts":"2026-07-14T23:37:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d660399b-e110-41e9-bb5c-bb52d0af0b7a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ac051f108d63"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=97f58e18-e78c-4dbe-93a2-70a7ad5158e0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9f6cdc29-bd79-4ecd-b194-a17f6a500fce","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"cae086f2dfc373e5aad98209a1a1cc4a7a4fd8bab9b2c0e3f0785b8028ec7c58"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-638b58.apps.e22d099d-c588-4592-b2f9-ac051f108d63.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T23:37:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d660399b-e110-41e9-bb5c-bb52d0af0b7a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T23:37:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d660399b-e110-41e9-bb5c-bb52d0af0b7a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T23:37:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d660399b-e110-41e9-bb5c-bb52d0af0b7a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-638b58/auth-test-model-638b58\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-638b58/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T23:37:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d660399b-e110-41e9-bb5c-bb52d0af0b7a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T23:37:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d660399b-e110-41e9-bb5c-bb52d0af0b7a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T23:37:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d660399b-e110-41e9-bb5c-bb52d0af0b7a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T23:37:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d660399b-e110-41e9-bb5c-bb52d0af0b7a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T23:37:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d660399b-e110-41e9-bb5c-bb52d0af0b7a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T23:37:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2ffe73df-70f1-44d6-87f0-4279b6810aa9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:58292","PortSpecifier":{"PortValue":58292}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2ffe73df-70f1-44d6-87f0-4279b6810aa9","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-d62786.apps.e22d099d-c588-4592-b2f9-ac051f108d63.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T23:37:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2ffe73df-70f1-44d6-87f0-4279b6810aa9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:58292","PortSpecifier":{"PortValue":58292}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784072261,"nanos":886553857},"http":{"id":"2ffe73df-70f1-44d6-87f0-4279b6810aa9","method":"POST","headers":{":authority":"e2e-shared-a-d62786.apps.e22d099d-c588-4592-b2f9-ac051f108d63.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T23:37:41Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2ffe73df-70f1-44d6-87f0-4279b6810aa9","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T23:37:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2ffe73df-70f1-44d6-87f0-4279b6810aa9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9f6cdc29-bd79-4ecd-b194-a17f6a500fce","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=97f58e18-e78c-4dbe-93a2-70a7ad5158e0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ac051f108d63"]}} {"level":"debug","ts":"2026-07-14T23:37:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2ffe73df-70f1-44d6-87f0-4279b6810aa9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ac051f108d63"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=97f58e18-e78c-4dbe-93a2-70a7ad5158e0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9f6cdc29-bd79-4ecd-b194-a17f6a500fce","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5fad47ffc1d8c69c4202dba81340880877bd8073d47e151e598706074623c291"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-d62786.apps.e22d099d-c588-4592-b2f9-ac051f108d63.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T23:37:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2ffe73df-70f1-44d6-87f0-4279b6810aa9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T23:37:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2ffe73df-70f1-44d6-87f0-4279b6810aa9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T23:37:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2ffe73df-70f1-44d6-87f0-4279b6810aa9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d62786/auth-test-model-d62786\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d62786/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T23:37:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2ffe73df-70f1-44d6-87f0-4279b6810aa9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T23:37:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2ffe73df-70f1-44d6-87f0-4279b6810aa9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T23:37:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2ffe73df-70f1-44d6-87f0-4279b6810aa9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-14T23:37:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2ffe73df-70f1-44d6-87f0-4279b6810aa9","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T23:37:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2ffe73df-70f1-44d6-87f0-4279b6810aa9","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T23:37:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"eae5b177-ca73-49e4-9523-64b7a045ed39","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:47048","PortSpecifier":{"PortValue":47048}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"eae5b177-ca73-49e4-9523-64b7a045ed39","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-638b58.apps.e22d099d-c588-4592-b2f9-ac051f108d63.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T23:37:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"eae5b177-ca73-49e4-9523-64b7a045ed39","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:47048","PortSpecifier":{"PortValue":47048}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784072261,"nanos":921905681},"http":{"id":"eae5b177-ca73-49e4-9523-64b7a045ed39","method":"POST","headers":{":authority":"e2e-shared-b-638b58.apps.e22d099d-c588-4592-b2f9-ac051f108d63.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T23:37:41Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"eae5b177-ca73-49e4-9523-64b7a045ed39","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T23:37:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"eae5b177-ca73-49e4-9523-64b7a045ed39","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9f6cdc29-bd79-4ecd-b194-a17f6a500fce","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=97f58e18-e78c-4dbe-93a2-70a7ad5158e0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ac051f108d63"]}} {"level":"debug","ts":"2026-07-14T23:37:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"eae5b177-ca73-49e4-9523-64b7a045ed39","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ac051f108d63"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=97f58e18-e78c-4dbe-93a2-70a7ad5158e0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9f6cdc29-bd79-4ecd-b194-a17f6a500fce","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"cae086f2dfc373e5aad98209a1a1cc4a7a4fd8bab9b2c0e3f0785b8028ec7c58"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-638b58.apps.e22d099d-c588-4592-b2f9-ac051f108d63.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T23:37:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eae5b177-ca73-49e4-9523-64b7a045ed39","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T23:37:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eae5b177-ca73-49e4-9523-64b7a045ed39","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T23:37:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eae5b177-ca73-49e4-9523-64b7a045ed39","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-638b58/auth-test-model-638b58\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-638b58/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T23:37:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"eae5b177-ca73-49e4-9523-64b7a045ed39","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T23:37:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eae5b177-ca73-49e4-9523-64b7a045ed39","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T23:37:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eae5b177-ca73-49e4-9523-64b7a045ed39","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T23:37:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"eae5b177-ca73-49e4-9523-64b7a045ed39","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T23:37:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"eae5b177-ca73-49e4-9523-64b7a045ed39","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T23:37:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8f4bf3fa-cd3c-42bc-8d40-5c9edc3dd2ce","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:35078","PortSpecifier":{"PortValue":35078}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8f4bf3fa-cd3c-42bc-8d40-5c9edc3dd2ce","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-d62786.apps.e22d099d-c588-4592-b2f9-ac051f108d63.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T23:37:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8f4bf3fa-cd3c-42bc-8d40-5c9edc3dd2ce","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:35078","PortSpecifier":{"PortValue":35078}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784072279,"nanos":70191605},"http":{"id":"8f4bf3fa-cd3c-42bc-8d40-5c9edc3dd2ce","method":"POST","headers":{":authority":"e2e-shared-a-d62786.apps.e22d099d-c588-4592-b2f9-ac051f108d63.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T23:37:59Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8f4bf3fa-cd3c-42bc-8d40-5c9edc3dd2ce","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T23:37:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8f4bf3fa-cd3c-42bc-8d40-5c9edc3dd2ce","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9f6cdc29-bd79-4ecd-b194-a17f6a500fce","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=97f58e18-e78c-4dbe-93a2-70a7ad5158e0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ac051f108d63"]}} {"level":"debug","ts":"2026-07-14T23:37:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8f4bf3fa-cd3c-42bc-8d40-5c9edc3dd2ce","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ac051f108d63"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=97f58e18-e78c-4dbe-93a2-70a7ad5158e0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9f6cdc29-bd79-4ecd-b194-a17f6a500fce","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5fad47ffc1d8c69c4202dba81340880877bd8073d47e151e598706074623c291"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-d62786.apps.e22d099d-c588-4592-b2f9-ac051f108d63.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T23:37:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8f4bf3fa-cd3c-42bc-8d40-5c9edc3dd2ce","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T23:37:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8f4bf3fa-cd3c-42bc-8d40-5c9edc3dd2ce","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T23:37:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8f4bf3fa-cd3c-42bc-8d40-5c9edc3dd2ce","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d62786/auth-test-model-d62786\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d62786/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T23:37:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8f4bf3fa-cd3c-42bc-8d40-5c9edc3dd2ce","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T23:37:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8f4bf3fa-cd3c-42bc-8d40-5c9edc3dd2ce","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T23:37:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8f4bf3fa-cd3c-42bc-8d40-5c9edc3dd2ce","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-14T23:37:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8f4bf3fa-cd3c-42bc-8d40-5c9edc3dd2ce","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T23:37:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8f4bf3fa-cd3c-42bc-8d40-5c9edc3dd2ce","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T23:37:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"87403da6-524a-49ba-8bb2-0fafffdb2515","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:36410","PortSpecifier":{"PortValue":36410}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"87403da6-524a-49ba-8bb2-0fafffdb2515","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-638b58.apps.e22d099d-c588-4592-b2f9-ac051f108d63.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T23:37:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"87403da6-524a-49ba-8bb2-0fafffdb2515","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:36410","PortSpecifier":{"PortValue":36410}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784072279,"nanos":104656299},"http":{"id":"87403da6-524a-49ba-8bb2-0fafffdb2515","method":"POST","headers":{":authority":"e2e-shared-b-638b58.apps.e22d099d-c588-4592-b2f9-ac051f108d63.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T23:37:59Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"87403da6-524a-49ba-8bb2-0fafffdb2515","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T23:37:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"87403da6-524a-49ba-8bb2-0fafffdb2515","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9f6cdc29-bd79-4ecd-b194-a17f6a500fce","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=97f58e18-e78c-4dbe-93a2-70a7ad5158e0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ac051f108d63"]}} {"level":"debug","ts":"2026-07-14T23:37:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"87403da6-524a-49ba-8bb2-0fafffdb2515","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ac051f108d63"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=97f58e18-e78c-4dbe-93a2-70a7ad5158e0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9f6cdc29-bd79-4ecd-b194-a17f6a500fce","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"cae086f2dfc373e5aad98209a1a1cc4a7a4fd8bab9b2c0e3f0785b8028ec7c58"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-638b58.apps.e22d099d-c588-4592-b2f9-ac051f108d63.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T23:37:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"87403da6-524a-49ba-8bb2-0fafffdb2515","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T23:37:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"87403da6-524a-49ba-8bb2-0fafffdb2515","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T23:37:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"87403da6-524a-49ba-8bb2-0fafffdb2515","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-638b58/auth-test-model-638b58\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-638b58/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T23:37:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"87403da6-524a-49ba-8bb2-0fafffdb2515","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T23:37:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"87403da6-524a-49ba-8bb2-0fafffdb2515","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T23:37:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"87403da6-524a-49ba-8bb2-0fafffdb2515","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T23:37:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"87403da6-524a-49ba-8bb2-0fafffdb2515","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T23:37:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"87403da6-524a-49ba-8bb2-0fafffdb2515","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T23:37:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"72db910d-626f-434f-baac-c1710c44173b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:36414","PortSpecifier":{"PortValue":36414}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"72db910d-626f-434f-baac-c1710c44173b","method":"GET","path":"/maas-api/v1/api-keys/e91279d3-ab67-442e-860b-2b7da26b3a24","host":"e2e-shared-b-638b58.apps.e22d099d-c588-4592-b2f9-ac051f108d63.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T23:37:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"72db910d-626f-434f-baac-c1710c44173b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:36414","PortSpecifier":{"PortValue":36414}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784072279,"nanos":139535951},"http":{"id":"72db910d-626f-434f-baac-c1710c44173b","method":"GET","headers":{":authority":"e2e-shared-b-638b58.apps.e22d099d-c588-4592-b2f9-ac051f108d63.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/e91279d3-ab67-442e-860b-2b7da26b3a24",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T23:37:59Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"72db910d-626f-434f-baac-c1710c44173b","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T23:37:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"72db910d-626f-434f-baac-c1710c44173b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9f6cdc29-bd79-4ecd-b194-a17f6a500fce","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=97f58e18-e78c-4dbe-93a2-70a7ad5158e0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ac051f108d63"]}} {"level":"debug","ts":"2026-07-14T23:37:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"72db910d-626f-434f-baac-c1710c44173b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ac051f108d63"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=97f58e18-e78c-4dbe-93a2-70a7ad5158e0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9f6cdc29-bd79-4ecd-b194-a17f6a500fce","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"cae086f2dfc373e5aad98209a1a1cc4a7a4fd8bab9b2c0e3f0785b8028ec7c58"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-638b58.apps.e22d099d-c588-4592-b2f9-ac051f108d63.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/e91279d3-ab67-442e-860b-2b7da26b3a24",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T23:37:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"72db910d-626f-434f-baac-c1710c44173b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T23:37:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"72db910d-626f-434f-baac-c1710c44173b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T23:37:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"72db910d-626f-434f-baac-c1710c44173b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-638b58/auth-test-model-638b58\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-638b58/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T23:37:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"72db910d-626f-434f-baac-c1710c44173b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T23:37:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"72db910d-626f-434f-baac-c1710c44173b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T23:37:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"72db910d-626f-434f-baac-c1710c44173b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T23:37:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"72db910d-626f-434f-baac-c1710c44173b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T23:37:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"72db910d-626f-434f-baac-c1710c44173b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T23:37:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b94ee6f1-7adc-49d6-92f1-e89a595162aa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:35094","PortSpecifier":{"PortValue":35094}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b94ee6f1-7adc-49d6-92f1-e89a595162aa","method":"GET","path":"/maas-api/v1/api-keys/e91279d3-ab67-442e-860b-2b7da26b3a24","host":"e2e-shared-a-d62786.apps.e22d099d-c588-4592-b2f9-ac051f108d63.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T23:37:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b94ee6f1-7adc-49d6-92f1-e89a595162aa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:35094","PortSpecifier":{"PortValue":35094}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784072279,"nanos":170418267},"http":{"id":"b94ee6f1-7adc-49d6-92f1-e89a595162aa","method":"GET","headers":{":authority":"e2e-shared-a-d62786.apps.e22d099d-c588-4592-b2f9-ac051f108d63.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/e91279d3-ab67-442e-860b-2b7da26b3a24",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T23:37:59Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b94ee6f1-7adc-49d6-92f1-e89a595162aa","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T23:37:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b94ee6f1-7adc-49d6-92f1-e89a595162aa","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9f6cdc29-bd79-4ecd-b194-a17f6a500fce","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=97f58e18-e78c-4dbe-93a2-70a7ad5158e0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ac051f108d63"]}} {"level":"debug","ts":"2026-07-14T23:37:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b94ee6f1-7adc-49d6-92f1-e89a595162aa","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ac051f108d63"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=97f58e18-e78c-4dbe-93a2-70a7ad5158e0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9f6cdc29-bd79-4ecd-b194-a17f6a500fce","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5fad47ffc1d8c69c4202dba81340880877bd8073d47e151e598706074623c291"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-d62786.apps.e22d099d-c588-4592-b2f9-ac051f108d63.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/e91279d3-ab67-442e-860b-2b7da26b3a24",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T23:37:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b94ee6f1-7adc-49d6-92f1-e89a595162aa","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T23:37:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b94ee6f1-7adc-49d6-92f1-e89a595162aa","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T23:37:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b94ee6f1-7adc-49d6-92f1-e89a595162aa","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d62786/auth-test-model-d62786\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d62786/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T23:37:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b94ee6f1-7adc-49d6-92f1-e89a595162aa","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T23:37:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b94ee6f1-7adc-49d6-92f1-e89a595162aa","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T23:37:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b94ee6f1-7adc-49d6-92f1-e89a595162aa","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T23:37:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b94ee6f1-7adc-49d6-92f1-e89a595162aa","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T23:37:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b94ee6f1-7adc-49d6-92f1-e89a595162aa","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T23:38:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a19243f7-6bd1-4d1e-b1b1-a3f1b018c08a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:43434","PortSpecifier":{"PortValue":43434}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a19243f7-6bd1-4d1e-b1b1-a3f1b018c08a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-d62786.apps.e22d099d-c588-4592-b2f9-ac051f108d63.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T23:38:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a19243f7-6bd1-4d1e-b1b1-a3f1b018c08a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:43434","PortSpecifier":{"PortValue":43434}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784072296,"nanos":341972174},"http":{"id":"a19243f7-6bd1-4d1e-b1b1-a3f1b018c08a","method":"POST","headers":{":authority":"e2e-shared-a-d62786.apps.e22d099d-c588-4592-b2f9-ac051f108d63.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T23:38:16Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a19243f7-6bd1-4d1e-b1b1-a3f1b018c08a","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T23:38:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a19243f7-6bd1-4d1e-b1b1-a3f1b018c08a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9f6cdc29-bd79-4ecd-b194-a17f6a500fce","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=97f58e18-e78c-4dbe-93a2-70a7ad5158e0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ac051f108d63"]}} {"level":"debug","ts":"2026-07-14T23:38:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a19243f7-6bd1-4d1e-b1b1-a3f1b018c08a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ac051f108d63"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=97f58e18-e78c-4dbe-93a2-70a7ad5158e0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9f6cdc29-bd79-4ecd-b194-a17f6a500fce","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5fad47ffc1d8c69c4202dba81340880877bd8073d47e151e598706074623c291"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-d62786.apps.e22d099d-c588-4592-b2f9-ac051f108d63.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T23:38:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a19243f7-6bd1-4d1e-b1b1-a3f1b018c08a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T23:38:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a19243f7-6bd1-4d1e-b1b1-a3f1b018c08a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T23:38:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a19243f7-6bd1-4d1e-b1b1-a3f1b018c08a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d62786/auth-test-model-d62786\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d62786/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T23:38:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a19243f7-6bd1-4d1e-b1b1-a3f1b018c08a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T23:38:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a19243f7-6bd1-4d1e-b1b1-a3f1b018c08a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T23:38:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a19243f7-6bd1-4d1e-b1b1-a3f1b018c08a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-14T23:38:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a19243f7-6bd1-4d1e-b1b1-a3f1b018c08a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T23:38:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a19243f7-6bd1-4d1e-b1b1-a3f1b018c08a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T23:38:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"911af6d8-5f65-4cd3-9c0d-0bfe89cc27a6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:49742","PortSpecifier":{"PortValue":49742}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"911af6d8-5f65-4cd3-9c0d-0bfe89cc27a6","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-638b58.apps.e22d099d-c588-4592-b2f9-ac051f108d63.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T23:38:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"911af6d8-5f65-4cd3-9c0d-0bfe89cc27a6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:49742","PortSpecifier":{"PortValue":49742}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784072296,"nanos":372562203},"http":{"id":"911af6d8-5f65-4cd3-9c0d-0bfe89cc27a6","method":"POST","headers":{":authority":"e2e-shared-b-638b58.apps.e22d099d-c588-4592-b2f9-ac051f108d63.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T23:38:16Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"911af6d8-5f65-4cd3-9c0d-0bfe89cc27a6","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T23:38:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"911af6d8-5f65-4cd3-9c0d-0bfe89cc27a6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9f6cdc29-bd79-4ecd-b194-a17f6a500fce","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=97f58e18-e78c-4dbe-93a2-70a7ad5158e0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ac051f108d63"]}} {"level":"debug","ts":"2026-07-14T23:38:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"911af6d8-5f65-4cd3-9c0d-0bfe89cc27a6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ac051f108d63"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=97f58e18-e78c-4dbe-93a2-70a7ad5158e0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9f6cdc29-bd79-4ecd-b194-a17f6a500fce","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"cae086f2dfc373e5aad98209a1a1cc4a7a4fd8bab9b2c0e3f0785b8028ec7c58"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-638b58.apps.e22d099d-c588-4592-b2f9-ac051f108d63.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T23:38:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"911af6d8-5f65-4cd3-9c0d-0bfe89cc27a6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T23:38:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"911af6d8-5f65-4cd3-9c0d-0bfe89cc27a6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T23:38:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"911af6d8-5f65-4cd3-9c0d-0bfe89cc27a6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-638b58/auth-test-model-638b58\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-638b58/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T23:38:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"911af6d8-5f65-4cd3-9c0d-0bfe89cc27a6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T23:38:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"911af6d8-5f65-4cd3-9c0d-0bfe89cc27a6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T23:38:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"911af6d8-5f65-4cd3-9c0d-0bfe89cc27a6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T23:38:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"911af6d8-5f65-4cd3-9c0d-0bfe89cc27a6","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T23:38:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"911af6d8-5f65-4cd3-9c0d-0bfe89cc27a6","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T23:38:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4b954a2a-1b7f-436c-a340-339f4c84c8d4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:43442","PortSpecifier":{"PortValue":43442}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4b954a2a-1b7f-436c-a340-339f4c84c8d4","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-d62786.apps.e22d099d-c588-4592-b2f9-ac051f108d63.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T23:38:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4b954a2a-1b7f-436c-a340-339f4c84c8d4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:43442","PortSpecifier":{"PortValue":43442}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784072296,"nanos":403542710},"http":{"id":"4b954a2a-1b7f-436c-a340-339f4c84c8d4","method":"POST","headers":{":authority":"e2e-shared-a-d62786.apps.e22d099d-c588-4592-b2f9-ac051f108d63.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T23:38:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4b954a2a-1b7f-436c-a340-339f4c84c8d4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-fbcD8dY7HhFry3Ug_8hMxAy0TGQuJrMN9r9DABBCAuZeSY5sOCs9l8FC2Nz7"} {"level":"debug","ts":"2026-07-14T23:38:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4b954a2a-1b7f-436c-a340-339f4c84c8d4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d62786.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-fbcD8dY7HhFry3Ug_8hMxAy0TGQuJrMN9r9DABBCAuZeSY5sOCs9l8FC2Nz7\"}"} {"level":"debug","ts":"2026-07-14T23:38:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4b954a2a-1b7f-436c-a340-339f4c84c8d4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d62786.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"55ed5057-c58a-4c9b-9cb3-ea56159f3678","keyName":"e2e-auth-iso-a-b6d230","subscription":"e2e-auth-iso-1dc9df","tenant":"e2e-shared-a-d62786","userId":"55ed5057-c58a-4c9b-9cb3-ea56159f3678","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T23:38:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4b954a2a-1b7f-436c-a340-339f4c84c8d4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T23:38:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4b954a2a-1b7f-436c-a340-339f4c84c8d4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T23:38:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4b954a2a-1b7f-436c-a340-339f4c84c8d4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T23:38:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4b954a2a-1b7f-436c-a340-339f4c84c8d4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d62786/auth-test-model-d62786\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d62786/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T23:38:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4b954a2a-1b7f-436c-a340-339f4c84c8d4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T23:38:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4b954a2a-1b7f-436c-a340-339f4c84c8d4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-14T23:38:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4b954a2a-1b7f-436c-a340-339f4c84c8d4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-1dc9df"} {"level":"debug","ts":"2026-07-14T23:38:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4b954a2a-1b7f-436c-a340-339f4c84c8d4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T23:38:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4b954a2a-1b7f-436c-a340-339f4c84c8d4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T23:38:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4b954a2a-1b7f-436c-a340-339f4c84c8d4","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T23:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bd062ffd7f1da11efa4335c2c7748ed0786d357d00c7d051362224c2c0a344d4"} {"level":"info","ts":"2026-07-14T23:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d52d4dc5f9fcfa984fe8e45666add087fb70ad8f7e7489f647af4e77c13cff79"} {"level":"info","ts":"2026-07-14T23:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1af413c566c3331ee7eb2cbf4d7a2cfc37199f6c06752307d97c4a892d40ee6c"} {"level":"info","ts":"2026-07-14T23:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2ce19fe35a7f002180b443fe04bfc4ee54ac316645e5add4c44f454045b62c3c"} {"level":"info","ts":"2026-07-14T23:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/64325db7a71e9bec8719b937338272dd6b0d47488ac9b80fba8c4fc4913c8097"} {"level":"info","ts":"2026-07-14T23:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/67a925f33b3a3b0f4691b0240ac4ae7d520e90a47859bd24df662b97f2192640"} {"level":"info","ts":"2026-07-14T23:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cae60a13d29bbbf29186c669a926b3846172de4e8c78bf303e014b13379cb76e"} {"level":"info","ts":"2026-07-14T23:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5197d1b15f03beaa902128967c5f14473205b7efb6ebf4f780f54319abe506d9"} {"level":"info","ts":"2026-07-14T23:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eacec045572b5ccc2719481783cc081165bc877777e81625f615a0c23a544d33"} {"level":"info","ts":"2026-07-14T23:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1a4295d6008243abdf35fb8146dab8fe7c4718853333d7e619b33a96ee59fcde"} {"level":"info","ts":"2026-07-14T23:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/33933c2e4c2cc3c046806003802206ba33ba5e0eee2aa9a140c764b7f8670056"} {"level":"info","ts":"2026-07-14T23:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/10050c35d251c853dfd4de01891d0a73d379cf0a21c8f8e5fc79e9e44fa396a0"} {"level":"info","ts":"2026-07-14T23:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b74b75b95e7438a5ffdaf7bd4404911562f541f77c655204e1efbbe40c13a029"} {"level":"info","ts":"2026-07-14T23:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/88bd16e07a6586e92e38bf7831bb7983dc525c386d25d9cad553e35be891a45b"} {"level":"info","ts":"2026-07-14T23:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/712741aa819cb66b745e34e3aba91d11f34a9bae087a7ddf184faf1ee4c638aa"} {"level":"info","ts":"2026-07-14T23:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/78ab0a6cadf8b306cba60a4f78e53b9d863755455106d12abbe4c911f7c81fa0"} {"level":"debug","ts":"2026-07-14T23:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"296e359e53d6806998ddc2411020fecf5f1d5d9c96f0f597e480139f60b0e2f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:38:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:38:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"296e359e53d6806998ddc2411020fecf5f1d5d9c96f0f597e480139f60b0e2f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"296e359e53d6806998ddc2411020fecf5f1d5d9c96f0f597e480139f60b0e2f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"296e359e53d6806998ddc2411020fecf5f1d5d9c96f0f597e480139f60b0e2f0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/296e359e53d6806998ddc2411020fecf5f1d5d9c96f0f597e480139f60b0e2f0"} {"level":"debug","ts":"2026-07-14T23:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"296e359e53d6806998ddc2411020fecf5f1d5d9c96f0f597e480139f60b0e2f0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/296e359e53d6806998ddc2411020fecf5f1d5d9c96f0f597e480139f60b0e2f0"} {"level":"debug","ts":"2026-07-14T23:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"296e359e53d6806998ddc2411020fecf5f1d5d9c96f0f597e480139f60b0e2f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:38:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:38:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["296e359e53d6806998ddc2411020fecf5f1d5d9c96f0f597e480139f60b0e2f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"296e359e53d6806998ddc2411020fecf5f1d5d9c96f0f597e480139f60b0e2f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"296e359e53d6806998ddc2411020fecf5f1d5d9c96f0f597e480139f60b0e2f0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/296e359e53d6806998ddc2411020fecf5f1d5d9c96f0f597e480139f60b0e2f0"} {"level":"debug","ts":"2026-07-14T23:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec692abeef6bbe3054e9f08e6f9bf1397cc1bbc93c94d9e59eb5ca91d6863f45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:38:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:38:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec692abeef6bbe3054e9f08e6f9bf1397cc1bbc93c94d9e59eb5ca91d6863f45","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec692abeef6bbe3054e9f08e6f9bf1397cc1bbc93c94d9e59eb5ca91d6863f45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:38:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:38:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec692abeef6bbe3054e9f08e6f9bf1397cc1bbc93c94d9e59eb5ca91d6863f45"} {"level":"info","ts":"2026-07-14T23:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec692abeef6bbe3054e9f08e6f9bf1397cc1bbc93c94d9e59eb5ca91d6863f45","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec692abeef6bbe3054e9f08e6f9bf1397cc1bbc93c94d9e59eb5ca91d6863f45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:38:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:38:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec692abeef6bbe3054e9f08e6f9bf1397cc1bbc93c94d9e59eb5ca91d6863f45"} {"level":"error","ts":"2026-07-14T23:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ec692abeef6bbe3054e9f08e6f9bf1397cc1bbc93c94d9e59eb5ca91d6863f45","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ec692abeef6bbe3054e9f08e6f9bf1397cc1bbc93c94d9e59eb5ca91d6863f45\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T23:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec692abeef6bbe3054e9f08e6f9bf1397cc1bbc93c94d9e59eb5ca91d6863f45","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec692abeef6bbe3054e9f08e6f9bf1397cc1bbc93c94d9e59eb5ca91d6863f45","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec692abeef6bbe3054e9f08e6f9bf1397cc1bbc93c94d9e59eb5ca91d6863f45"} {"level":"debug","ts":"2026-07-14T23:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec692abeef6bbe3054e9f08e6f9bf1397cc1bbc93c94d9e59eb5ca91d6863f45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:38:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:38:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec692abeef6bbe3054e9f08e6f9bf1397cc1bbc93c94d9e59eb5ca91d6863f45"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec692abeef6bbe3054e9f08e6f9bf1397cc1bbc93c94d9e59eb5ca91d6863f45","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec692abeef6bbe3054e9f08e6f9bf1397cc1bbc93c94d9e59eb5ca91d6863f45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:38:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:38:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec692abeef6bbe3054e9f08e6f9bf1397cc1bbc93c94d9e59eb5ca91d6863f45","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec692abeef6bbe3054e9f08e6f9bf1397cc1bbc93c94d9e59eb5ca91d6863f45","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec692abeef6bbe3054e9f08e6f9bf1397cc1bbc93c94d9e59eb5ca91d6863f45","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec692abeef6bbe3054e9f08e6f9bf1397cc1bbc93c94d9e59eb5ca91d6863f45"} {"level":"debug","ts":"2026-07-14T23:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec692abeef6bbe3054e9f08e6f9bf1397cc1bbc93c94d9e59eb5ca91d6863f45","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec692abeef6bbe3054e9f08e6f9bf1397cc1bbc93c94d9e59eb5ca91d6863f45"} {"level":"debug","ts":"2026-07-14T23:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec692abeef6bbe3054e9f08e6f9bf1397cc1bbc93c94d9e59eb5ca91d6863f45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:38:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:38:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec692abeef6bbe3054e9f08e6f9bf1397cc1bbc93c94d9e59eb5ca91d6863f45"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec692abeef6bbe3054e9f08e6f9bf1397cc1bbc93c94d9e59eb5ca91d6863f45","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec692abeef6bbe3054e9f08e6f9bf1397cc1bbc93c94d9e59eb5ca91d6863f45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:38:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:38:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec692abeef6bbe3054e9f08e6f9bf1397cc1bbc93c94d9e59eb5ca91d6863f45","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec692abeef6bbe3054e9f08e6f9bf1397cc1bbc93c94d9e59eb5ca91d6863f45","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec692abeef6bbe3054e9f08e6f9bf1397cc1bbc93c94d9e59eb5ca91d6863f45","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec692abeef6bbe3054e9f08e6f9bf1397cc1bbc93c94d9e59eb5ca91d6863f45"} {"level":"debug","ts":"2026-07-14T23:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec692abeef6bbe3054e9f08e6f9bf1397cc1bbc93c94d9e59eb5ca91d6863f45","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec692abeef6bbe3054e9f08e6f9bf1397cc1bbc93c94d9e59eb5ca91d6863f45"} {"level":"debug","ts":"2026-07-14T23:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1cd51e190473aa8c11bf2645dbfaee649470abfd2f16500da09be348c3f18247","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:38:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:38:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1cd51e190473aa8c11bf2645dbfaee649470abfd2f16500da09be348c3f18247","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1cd51e190473aa8c11bf2645dbfaee649470abfd2f16500da09be348c3f18247","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec692abeef6bbe3054e9f08e6f9bf1397cc1bbc93c94d9e59eb5ca91d6863f45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:38:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:38:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec692abeef6bbe3054e9f08e6f9bf1397cc1bbc93c94d9e59eb5ca91d6863f45"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1cd51e190473aa8c11bf2645dbfaee649470abfd2f16500da09be348c3f18247"} {"level":"info","ts":"2026-07-14T23:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec692abeef6bbe3054e9f08e6f9bf1397cc1bbc93c94d9e59eb5ca91d6863f45","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1cd51e190473aa8c11bf2645dbfaee649470abfd2f16500da09be348c3f18247","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec692abeef6bbe3054e9f08e6f9bf1397cc1bbc93c94d9e59eb5ca91d6863f45","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1cd51e190473aa8c11bf2645dbfaee649470abfd2f16500da09be348c3f18247"} {"level":"debug","ts":"2026-07-14T23:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1cd51e190473aa8c11bf2645dbfaee649470abfd2f16500da09be348c3f18247","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:38:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:38:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1cd51e190473aa8c11bf2645dbfaee649470abfd2f16500da09be348c3f18247"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1cd51e190473aa8c11bf2645dbfaee649470abfd2f16500da09be348c3f18247","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1cd51e190473aa8c11bf2645dbfaee649470abfd2f16500da09be348c3f18247","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec692abeef6bbe3054e9f08e6f9bf1397cc1bbc93c94d9e59eb5ca91d6863f45"} {"level":"info","ts":"2026-07-14T23:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1cd51e190473aa8c11bf2645dbfaee649470abfd2f16500da09be348c3f18247"} {"level":"debug","ts":"2026-07-14T23:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ff095973594577c03a3bd837408493970031d7e968432087a0f6a25330fa89b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:38:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:38:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ff095973594577c03a3bd837408493970031d7e968432087a0f6a25330fa89b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ff095973594577c03a3bd837408493970031d7e968432087a0f6a25330fa89b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ff095973594577c03a3bd837408493970031d7e968432087a0f6a25330fa89b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ff095973594577c03a3bd837408493970031d7e968432087a0f6a25330fa89b"} {"level":"debug","ts":"2026-07-14T23:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ff095973594577c03a3bd837408493970031d7e968432087a0f6a25330fa89b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ff095973594577c03a3bd837408493970031d7e968432087a0f6a25330fa89b"} {"level":"debug","ts":"2026-07-14T23:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ff095973594577c03a3bd837408493970031d7e968432087a0f6a25330fa89b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:38:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:38:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3ff095973594577c03a3bd837408493970031d7e968432087a0f6a25330fa89b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ff095973594577c03a3bd837408493970031d7e968432087a0f6a25330fa89b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ff095973594577c03a3bd837408493970031d7e968432087a0f6a25330fa89b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:38:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:38:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ff095973594577c03a3bd837408493970031d7e968432087a0f6a25330fa89b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ff095973594577c03a3bd837408493970031d7e968432087a0f6a25330fa89b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ff095973594577c03a3bd837408493970031d7e968432087a0f6a25330fa89b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ff095973594577c03a3bd837408493970031d7e968432087a0f6a25330fa89b"} {"level":"debug","ts":"2026-07-14T23:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ff095973594577c03a3bd837408493970031d7e968432087a0f6a25330fa89b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ff095973594577c03a3bd837408493970031d7e968432087a0f6a25330fa89b"} {"level":"debug","ts":"2026-07-14T23:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ff095973594577c03a3bd837408493970031d7e968432087a0f6a25330fa89b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:38:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:38:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3ff095973594577c03a3bd837408493970031d7e968432087a0f6a25330fa89b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ff095973594577c03a3bd837408493970031d7e968432087a0f6a25330fa89b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ff095973594577c03a3bd837408493970031d7e968432087a0f6a25330fa89b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ff095973594577c03a3bd837408493970031d7e968432087a0f6a25330fa89b"} {"level":"debug","ts":"2026-07-14T23:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"deda8794ed1757dc64a174fcf76059ddb717cd85c45423afa5a01edd6239d7fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:38:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:38:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"deda8794ed1757dc64a174fcf76059ddb717cd85c45423afa5a01edd6239d7fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"deda8794ed1757dc64a174fcf76059ddb717cd85c45423afa5a01edd6239d7fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"deda8794ed1757dc64a174fcf76059ddb717cd85c45423afa5a01edd6239d7fa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/deda8794ed1757dc64a174fcf76059ddb717cd85c45423afa5a01edd6239d7fa"} {"level":"debug","ts":"2026-07-14T23:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"deda8794ed1757dc64a174fcf76059ddb717cd85c45423afa5a01edd6239d7fa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/deda8794ed1757dc64a174fcf76059ddb717cd85c45423afa5a01edd6239d7fa"} {"level":"debug","ts":"2026-07-14T23:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"deda8794ed1757dc64a174fcf76059ddb717cd85c45423afa5a01edd6239d7fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:38:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:38:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["deda8794ed1757dc64a174fcf76059ddb717cd85c45423afa5a01edd6239d7fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"deda8794ed1757dc64a174fcf76059ddb717cd85c45423afa5a01edd6239d7fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"deda8794ed1757dc64a174fcf76059ddb717cd85c45423afa5a01edd6239d7fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:38:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:38:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"deda8794ed1757dc64a174fcf76059ddb717cd85c45423afa5a01edd6239d7fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac62eb9c4be31f1daac144b20e4afdb1ba57a9a991c471820856d85b22a42336","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:38:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:38:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac62eb9c4be31f1daac144b20e4afdb1ba57a9a991c471820856d85b22a42336","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"deda8794ed1757dc64a174fcf76059ddb717cd85c45423afa5a01edd6239d7fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac62eb9c4be31f1daac144b20e4afdb1ba57a9a991c471820856d85b22a42336","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac62eb9c4be31f1daac144b20e4afdb1ba57a9a991c471820856d85b22a42336","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"deda8794ed1757dc64a174fcf76059ddb717cd85c45423afa5a01edd6239d7fa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/deda8794ed1757dc64a174fcf76059ddb717cd85c45423afa5a01edd6239d7fa"} {"level":"debug","ts":"2026-07-14T23:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac62eb9c4be31f1daac144b20e4afdb1ba57a9a991c471820856d85b22a42336","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:38:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:38:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac62eb9c4be31f1daac144b20e4afdb1ba57a9a991c471820856d85b22a42336","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"deda8794ed1757dc64a174fcf76059ddb717cd85c45423afa5a01edd6239d7fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:38:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:38:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["deda8794ed1757dc64a174fcf76059ddb717cd85c45423afa5a01edd6239d7fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"deda8794ed1757dc64a174fcf76059ddb717cd85c45423afa5a01edd6239d7fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac62eb9c4be31f1daac144b20e4afdb1ba57a9a991c471820856d85b22a42336","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"deda8794ed1757dc64a174fcf76059ddb717cd85c45423afa5a01edd6239d7fa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac62eb9c4be31f1daac144b20e4afdb1ba57a9a991c471820856d85b22a42336"} {"level":"debug","ts":"2026-07-14T23:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac62eb9c4be31f1daac144b20e4afdb1ba57a9a991c471820856d85b22a42336","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:38:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:38:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ac62eb9c4be31f1daac144b20e4afdb1ba57a9a991c471820856d85b22a42336"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/deda8794ed1757dc64a174fcf76059ddb717cd85c45423afa5a01edd6239d7fa"} {"level":"info","ts":"2026-07-14T23:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac62eb9c4be31f1daac144b20e4afdb1ba57a9a991c471820856d85b22a42336","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"05bef56f924dc4119fa0e9c7a767605af576f7ee24b9e4e8016cae5797561c01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:38:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:38:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"05bef56f924dc4119fa0e9c7a767605af576f7ee24b9e4e8016cae5797561c01","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac62eb9c4be31f1daac144b20e4afdb1ba57a9a991c471820856d85b22a42336","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:38:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:38:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac62eb9c4be31f1daac144b20e4afdb1ba57a9a991c471820856d85b22a42336"} {"level":"info","ts":"2026-07-14T23:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac62eb9c4be31f1daac144b20e4afdb1ba57a9a991c471820856d85b22a42336","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"05bef56f924dc4119fa0e9c7a767605af576f7ee24b9e4e8016cae5797561c01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:38:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:38:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"05bef56f924dc4119fa0e9c7a767605af576f7ee24b9e4e8016cae5797561c01","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac62eb9c4be31f1daac144b20e4afdb1ba57a9a991c471820856d85b22a42336","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:38:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:38:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ac62eb9c4be31f1daac144b20e4afdb1ba57a9a991c471820856d85b22a42336"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/05bef56f924dc4119fa0e9c7a767605af576f7ee24b9e4e8016cae5797561c01"} {"level":"info","ts":"2026-07-14T23:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac62eb9c4be31f1daac144b20e4afdb1ba57a9a991c471820856d85b22a42336","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"05bef56f924dc4119fa0e9c7a767605af576f7ee24b9e4e8016cae5797561c01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:38:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:38:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["05bef56f924dc4119fa0e9c7a767605af576f7ee24b9e4e8016cae5797561c01"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac62eb9c4be31f1daac144b20e4afdb1ba57a9a991c471820856d85b22a42336"} {"level":"info","ts":"2026-07-14T23:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"05bef56f924dc4119fa0e9c7a767605af576f7ee24b9e4e8016cae5797561c01","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac62eb9c4be31f1daac144b20e4afdb1ba57a9a991c471820856d85b22a42336","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"05bef56f924dc4119fa0e9c7a767605af576f7ee24b9e4e8016cae5797561c01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:38:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:38:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"05bef56f924dc4119fa0e9c7a767605af576f7ee24b9e4e8016cae5797561c01","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"05bef56f924dc4119fa0e9c7a767605af576f7ee24b9e4e8016cae5797561c01","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"05bef56f924dc4119fa0e9c7a767605af576f7ee24b9e4e8016cae5797561c01","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/05bef56f924dc4119fa0e9c7a767605af576f7ee24b9e4e8016cae5797561c01"} {"level":"debug","ts":"2026-07-14T23:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15cc5574504468bce78c3166c0407be52fc11c290b9fcc1a3164a6fe010e96ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:38:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:38:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15cc5574504468bce78c3166c0407be52fc11c290b9fcc1a3164a6fe010e96ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15cc5574504468bce78c3166c0407be52fc11c290b9fcc1a3164a6fe010e96ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"05bef56f924dc4119fa0e9c7a767605af576f7ee24b9e4e8016cae5797561c01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:38:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:38:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["05bef56f924dc4119fa0e9c7a767605af576f7ee24b9e4e8016cae5797561c01"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac62eb9c4be31f1daac144b20e4afdb1ba57a9a991c471820856d85b22a42336"} {"level":"info","ts":"2026-07-14T23:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"05bef56f924dc4119fa0e9c7a767605af576f7ee24b9e4e8016cae5797561c01","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15cc5574504468bce78c3166c0407be52fc11c290b9fcc1a3164a6fe010e96ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"05bef56f924dc4119fa0e9c7a767605af576f7ee24b9e4e8016cae5797561c01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:38:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:38:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/05bef56f924dc4119fa0e9c7a767605af576f7ee24b9e4e8016cae5797561c01"} {"level":"info","ts":"2026-07-14T23:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"05bef56f924dc4119fa0e9c7a767605af576f7ee24b9e4e8016cae5797561c01","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"05bef56f924dc4119fa0e9c7a767605af576f7ee24b9e4e8016cae5797561c01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:38:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:38:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["05bef56f924dc4119fa0e9c7a767605af576f7ee24b9e4e8016cae5797561c01"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"05bef56f924dc4119fa0e9c7a767605af576f7ee24b9e4e8016cae5797561c01","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15cc5574504468bce78c3166c0407be52fc11c290b9fcc1a3164a6fe010e96ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:38:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:38:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15cc5574504468bce78c3166c0407be52fc11c290b9fcc1a3164a6fe010e96ea"} {"level":"info","ts":"2026-07-14T23:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15cc5574504468bce78c3166c0407be52fc11c290b9fcc1a3164a6fe010e96ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"05bef56f924dc4119fa0e9c7a767605af576f7ee24b9e4e8016cae5797561c01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:38:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:38:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/05bef56f924dc4119fa0e9c7a767605af576f7ee24b9e4e8016cae5797561c01"} {"level":"info","ts":"2026-07-14T23:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"05bef56f924dc4119fa0e9c7a767605af576f7ee24b9e4e8016cae5797561c01","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15cc5574504468bce78c3166c0407be52fc11c290b9fcc1a3164a6fe010e96ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"05bef56f924dc4119fa0e9c7a767605af576f7ee24b9e4e8016cae5797561c01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:38:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:38:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["05bef56f924dc4119fa0e9c7a767605af576f7ee24b9e4e8016cae5797561c01"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"05bef56f924dc4119fa0e9c7a767605af576f7ee24b9e4e8016cae5797561c01","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"05bef56f924dc4119fa0e9c7a767605af576f7ee24b9e4e8016cae5797561c01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:38:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:38:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["05bef56f924dc4119fa0e9c7a767605af576f7ee24b9e4e8016cae5797561c01"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-14T23:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"05bef56f924dc4119fa0e9c7a767605af576f7ee24b9e4e8016cae5797561c01","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"05bef56f924dc4119fa0e9c7a767605af576f7ee24b9e4e8016cae5797561c01\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T23:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"05bef56f924dc4119fa0e9c7a767605af576f7ee24b9e4e8016cae5797561c01","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15cc5574504468bce78c3166c0407be52fc11c290b9fcc1a3164a6fe010e96ea"} {"level":"debug","ts":"2026-07-14T23:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15cc5574504468bce78c3166c0407be52fc11c290b9fcc1a3164a6fe010e96ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:38:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:38:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["15cc5574504468bce78c3166c0407be52fc11c290b9fcc1a3164a6fe010e96ea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15cc5574504468bce78c3166c0407be52fc11c290b9fcc1a3164a6fe010e96ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"05bef56f924dc4119fa0e9c7a767605af576f7ee24b9e4e8016cae5797561c01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:38:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:38:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/05bef56f924dc4119fa0e9c7a767605af576f7ee24b9e4e8016cae5797561c01"} {"level":"info","ts":"2026-07-14T23:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"05bef56f924dc4119fa0e9c7a767605af576f7ee24b9e4e8016cae5797561c01","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15cc5574504468bce78c3166c0407be52fc11c290b9fcc1a3164a6fe010e96ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:38:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:38:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15cc5574504468bce78c3166c0407be52fc11c290b9fcc1a3164a6fe010e96ea"} {"level":"info","ts":"2026-07-14T23:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15cc5574504468bce78c3166c0407be52fc11c290b9fcc1a3164a6fe010e96ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"05bef56f924dc4119fa0e9c7a767605af576f7ee24b9e4e8016cae5797561c01","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15cc5574504468bce78c3166c0407be52fc11c290b9fcc1a3164a6fe010e96ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:38:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:38:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["15cc5574504468bce78c3166c0407be52fc11c290b9fcc1a3164a6fe010e96ea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15cc5574504468bce78c3166c0407be52fc11c290b9fcc1a3164a6fe010e96ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"05bef56f924dc4119fa0e9c7a767605af576f7ee24b9e4e8016cae5797561c01","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15cc5574504468bce78c3166c0407be52fc11c290b9fcc1a3164a6fe010e96ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:38:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:38:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["15cc5574504468bce78c3166c0407be52fc11c290b9fcc1a3164a6fe010e96ea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-14T23:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"15cc5574504468bce78c3166c0407be52fc11c290b9fcc1a3164a6fe010e96ea","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"15cc5574504468bce78c3166c0407be52fc11c290b9fcc1a3164a6fe010e96ea\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T23:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15cc5574504468bce78c3166c0407be52fc11c290b9fcc1a3164a6fe010e96ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15cc5574504468bce78c3166c0407be52fc11c290b9fcc1a3164a6fe010e96ea","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/05bef56f924dc4119fa0e9c7a767605af576f7ee24b9e4e8016cae5797561c01"} {"level":"debug","ts":"2026-07-14T23:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"05bef56f924dc4119fa0e9c7a767605af576f7ee24b9e4e8016cae5797561c01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:38:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:38:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["05bef56f924dc4119fa0e9c7a767605af576f7ee24b9e4e8016cae5797561c01"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15cc5574504468bce78c3166c0407be52fc11c290b9fcc1a3164a6fe010e96ea"} {"level":"info","ts":"2026-07-14T23:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"05bef56f924dc4119fa0e9c7a767605af576f7ee24b9e4e8016cae5797561c01","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"05bef56f924dc4119fa0e9c7a767605af576f7ee24b9e4e8016cae5797561c01","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/05bef56f924dc4119fa0e9c7a767605af576f7ee24b9e4e8016cae5797561c01"} {"level":"debug","ts":"2026-07-14T23:38:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"625da130b7844f37c52b6579827e9631158e4f6a772c8560dab930fee000b975","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:38:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:38:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:38:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"625da130b7844f37c52b6579827e9631158e4f6a772c8560dab930fee000b975","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:38:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"625da130b7844f37c52b6579827e9631158e4f6a772c8560dab930fee000b975","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:38:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"625da130b7844f37c52b6579827e9631158e4f6a772c8560dab930fee000b975","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:38:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/625da130b7844f37c52b6579827e9631158e4f6a772c8560dab930fee000b975"} {"level":"debug","ts":"2026-07-14T23:38:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"625da130b7844f37c52b6579827e9631158e4f6a772c8560dab930fee000b975","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:38:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/625da130b7844f37c52b6579827e9631158e4f6a772c8560dab930fee000b975"} {"level":"debug","ts":"2026-07-14T23:38:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"625da130b7844f37c52b6579827e9631158e4f6a772c8560dab930fee000b975","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:38:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:38:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["625da130b7844f37c52b6579827e9631158e4f6a772c8560dab930fee000b975"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:38:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"625da130b7844f37c52b6579827e9631158e4f6a772c8560dab930fee000b975","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:38:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"625da130b7844f37c52b6579827e9631158e4f6a772c8560dab930fee000b975","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:38:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4292631a1ab2c940425198a75b28fff7ddafdefa8645d71d6f517474909f1c1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:38:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:38:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:38:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4292631a1ab2c940425198a75b28fff7ddafdefa8645d71d6f517474909f1c1d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:38:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4292631a1ab2c940425198a75b28fff7ddafdefa8645d71d6f517474909f1c1d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:38:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4292631a1ab2c940425198a75b28fff7ddafdefa8645d71d6f517474909f1c1d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:38:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/625da130b7844f37c52b6579827e9631158e4f6a772c8560dab930fee000b975"} {"level":"debug","ts":"2026-07-14T23:38:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4292631a1ab2c940425198a75b28fff7ddafdefa8645d71d6f517474909f1c1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:38:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:38:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:38:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4292631a1ab2c940425198a75b28fff7ddafdefa8645d71d6f517474909f1c1d"} {"level":"info","ts":"2026-07-14T23:38:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4292631a1ab2c940425198a75b28fff7ddafdefa8645d71d6f517474909f1c1d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:38:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4292631a1ab2c940425198a75b28fff7ddafdefa8645d71d6f517474909f1c1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:38:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:38:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4292631a1ab2c940425198a75b28fff7ddafdefa8645d71d6f517474909f1c1d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:38:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4292631a1ab2c940425198a75b28fff7ddafdefa8645d71d6f517474909f1c1d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:38:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4292631a1ab2c940425198a75b28fff7ddafdefa8645d71d6f517474909f1c1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:38:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:38:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:38:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4292631a1ab2c940425198a75b28fff7ddafdefa8645d71d6f517474909f1c1d"} {"level":"info","ts":"2026-07-14T23:38:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4292631a1ab2c940425198a75b28fff7ddafdefa8645d71d6f517474909f1c1d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:38:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4292631a1ab2c940425198a75b28fff7ddafdefa8645d71d6f517474909f1c1d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:38:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4292631a1ab2c940425198a75b28fff7ddafdefa8645d71d6f517474909f1c1d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:38:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4292631a1ab2c940425198a75b28fff7ddafdefa8645d71d6f517474909f1c1d"} {"level":"debug","ts":"2026-07-14T23:38:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4292631a1ab2c940425198a75b28fff7ddafdefa8645d71d6f517474909f1c1d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:38:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4292631a1ab2c940425198a75b28fff7ddafdefa8645d71d6f517474909f1c1d"} {"level":"debug","ts":"2026-07-14T23:38:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4292631a1ab2c940425198a75b28fff7ddafdefa8645d71d6f517474909f1c1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:38:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:38:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4292631a1ab2c940425198a75b28fff7ddafdefa8645d71d6f517474909f1c1d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:38:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4292631a1ab2c940425198a75b28fff7ddafdefa8645d71d6f517474909f1c1d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:38:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4292631a1ab2c940425198a75b28fff7ddafdefa8645d71d6f517474909f1c1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:38:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:38:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:38:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4292631a1ab2c940425198a75b28fff7ddafdefa8645d71d6f517474909f1c1d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:38:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4292631a1ab2c940425198a75b28fff7ddafdefa8645d71d6f517474909f1c1d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:38:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4292631a1ab2c940425198a75b28fff7ddafdefa8645d71d6f517474909f1c1d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:38:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4292631a1ab2c940425198a75b28fff7ddafdefa8645d71d6f517474909f1c1d"} {"level":"debug","ts":"2026-07-14T23:38:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4292631a1ab2c940425198a75b28fff7ddafdefa8645d71d6f517474909f1c1d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:38:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"054334e45417a2d41d1c6055ddf7eda34a9b868cf4bc38898ee6794861811b77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:38:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:38:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:38:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4292631a1ab2c940425198a75b28fff7ddafdefa8645d71d6f517474909f1c1d"} {"level":"info","ts":"2026-07-14T23:38:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"054334e45417a2d41d1c6055ddf7eda34a9b868cf4bc38898ee6794861811b77","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:38:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"054334e45417a2d41d1c6055ddf7eda34a9b868cf4bc38898ee6794861811b77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:38:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:38:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:38:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/054334e45417a2d41d1c6055ddf7eda34a9b868cf4bc38898ee6794861811b77"} {"level":"info","ts":"2026-07-14T23:38:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"054334e45417a2d41d1c6055ddf7eda34a9b868cf4bc38898ee6794861811b77","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:38:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"054334e45417a2d41d1c6055ddf7eda34a9b868cf4bc38898ee6794861811b77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:38:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:38:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-14T23:38:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"054334e45417a2d41d1c6055ddf7eda34a9b868cf4bc38898ee6794861811b77","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"054334e45417a2d41d1c6055ddf7eda34a9b868cf4bc38898ee6794861811b77\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T23:38:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"054334e45417a2d41d1c6055ddf7eda34a9b868cf4bc38898ee6794861811b77","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:38:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"054334e45417a2d41d1c6055ddf7eda34a9b868cf4bc38898ee6794861811b77","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:38:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4292631a1ab2c940425198a75b28fff7ddafdefa8645d71d6f517474909f1c1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:38:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:38:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4292631a1ab2c940425198a75b28fff7ddafdefa8645d71d6f517474909f1c1d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:38:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/054334e45417a2d41d1c6055ddf7eda34a9b868cf4bc38898ee6794861811b77"} {"level":"info","ts":"2026-07-14T23:38:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4292631a1ab2c940425198a75b28fff7ddafdefa8645d71d6f517474909f1c1d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:38:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4292631a1ab2c940425198a75b28fff7ddafdefa8645d71d6f517474909f1c1d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:38:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/054334e45417a2d41d1c6055ddf7eda34a9b868cf4bc38898ee6794861811b77"} {"level":"info","ts":"2026-07-14T23:38:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4292631a1ab2c940425198a75b28fff7ddafdefa8645d71d6f517474909f1c1d"} {"level":"debug","ts":"2026-07-14T23:38:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d8b679a1fe3a9e6264decd2dd5f64d76f0cdd5a5ca50229274f02a8508db7d8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:38:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:38:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:38:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d8b679a1fe3a9e6264decd2dd5f64d76f0cdd5a5ca50229274f02a8508db7d8b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:38:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"054334e45417a2d41d1c6055ddf7eda34a9b868cf4bc38898ee6794861811b77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:38:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:38:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["054334e45417a2d41d1c6055ddf7eda34a9b868cf4bc38898ee6794861811b77"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:38:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d8b679a1fe3a9e6264decd2dd5f64d76f0cdd5a5ca50229274f02a8508db7d8b"} {"level":"info","ts":"2026-07-14T23:38:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"054334e45417a2d41d1c6055ddf7eda34a9b868cf4bc38898ee6794861811b77","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:38:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d8b679a1fe3a9e6264decd2dd5f64d76f0cdd5a5ca50229274f02a8508db7d8b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:38:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"054334e45417a2d41d1c6055ddf7eda34a9b868cf4bc38898ee6794861811b77","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:38:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d8b679a1fe3a9e6264decd2dd5f64d76f0cdd5a5ca50229274f02a8508db7d8b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:38:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d8b679a1fe3a9e6264decd2dd5f64d76f0cdd5a5ca50229274f02a8508db7d8b"} {"level":"debug","ts":"2026-07-14T23:38:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d8b679a1fe3a9e6264decd2dd5f64d76f0cdd5a5ca50229274f02a8508db7d8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:38:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:38:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d8b679a1fe3a9e6264decd2dd5f64d76f0cdd5a5ca50229274f02a8508db7d8b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:38:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/054334e45417a2d41d1c6055ddf7eda34a9b868cf4bc38898ee6794861811b77"} {"level":"info","ts":"2026-07-14T23:38:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d8b679a1fe3a9e6264decd2dd5f64d76f0cdd5a5ca50229274f02a8508db7d8b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:38:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d8b679a1fe3a9e6264decd2dd5f64d76f0cdd5a5ca50229274f02a8508db7d8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:38:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:38:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:38:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d8b679a1fe3a9e6264decd2dd5f64d76f0cdd5a5ca50229274f02a8508db7d8b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:38:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d8b679a1fe3a9e6264decd2dd5f64d76f0cdd5a5ca50229274f02a8508db7d8b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:38:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d8b679a1fe3a9e6264decd2dd5f64d76f0cdd5a5ca50229274f02a8508db7d8b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:38:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d8b679a1fe3a9e6264decd2dd5f64d76f0cdd5a5ca50229274f02a8508db7d8b"} {"level":"debug","ts":"2026-07-14T23:38:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"299899c159ac61e8fe1afb6e48a39a680473c69695b070d91588ceb1d7f2748f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:38:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:38:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:38:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"299899c159ac61e8fe1afb6e48a39a680473c69695b070d91588ceb1d7f2748f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:38:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d8b679a1fe3a9e6264decd2dd5f64d76f0cdd5a5ca50229274f02a8508db7d8b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:38:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"299899c159ac61e8fe1afb6e48a39a680473c69695b070d91588ceb1d7f2748f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:38:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d8b679a1fe3a9e6264decd2dd5f64d76f0cdd5a5ca50229274f02a8508db7d8b"} {"level":"debug","ts":"2026-07-14T23:38:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"299899c159ac61e8fe1afb6e48a39a680473c69695b070d91588ceb1d7f2748f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:38:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:38:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:38:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"299899c159ac61e8fe1afb6e48a39a680473c69695b070d91588ceb1d7f2748f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:38:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"299899c159ac61e8fe1afb6e48a39a680473c69695b070d91588ceb1d7f2748f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:38:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/299899c159ac61e8fe1afb6e48a39a680473c69695b070d91588ceb1d7f2748f"} {"level":"debug","ts":"2026-07-14T23:38:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"299899c159ac61e8fe1afb6e48a39a680473c69695b070d91588ceb1d7f2748f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:38:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d8b679a1fe3a9e6264decd2dd5f64d76f0cdd5a5ca50229274f02a8508db7d8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:38:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:38:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d8b679a1fe3a9e6264decd2dd5f64d76f0cdd5a5ca50229274f02a8508db7d8b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:38:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/299899c159ac61e8fe1afb6e48a39a680473c69695b070d91588ceb1d7f2748f"} {"level":"info","ts":"2026-07-14T23:38:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d8b679a1fe3a9e6264decd2dd5f64d76f0cdd5a5ca50229274f02a8508db7d8b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:38:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d8b679a1fe3a9e6264decd2dd5f64d76f0cdd5a5ca50229274f02a8508db7d8b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:38:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d8b679a1fe3a9e6264decd2dd5f64d76f0cdd5a5ca50229274f02a8508db7d8b"} {"level":"debug","ts":"2026-07-14T23:38:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a7806c15a244201013467784746c527ef1850119bdeed5da1f35832b06aea56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:38:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:38:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:38:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a7806c15a244201013467784746c527ef1850119bdeed5da1f35832b06aea56","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:38:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c3aa3c672d57a2d6ce6868eeb858ee0337ad72c0b85b0784357332cc8bbcefa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:38:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:38:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:38:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a7806c15a244201013467784746c527ef1850119bdeed5da1f35832b06aea56"} {"level":"info","ts":"2026-07-14T23:38:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c3aa3c672d57a2d6ce6868eeb858ee0337ad72c0b85b0784357332cc8bbcefa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:38:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a7806c15a244201013467784746c527ef1850119bdeed5da1f35832b06aea56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:38:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:38:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2a7806c15a244201013467784746c527ef1850119bdeed5da1f35832b06aea56"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:38:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c3aa3c672d57a2d6ce6868eeb858ee0337ad72c0b85b0784357332cc8bbcefa"} {"level":"info","ts":"2026-07-14T23:38:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a7806c15a244201013467784746c527ef1850119bdeed5da1f35832b06aea56","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:38:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c3aa3c672d57a2d6ce6868eeb858ee0337ad72c0b85b0784357332cc8bbcefa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:38:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:38:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1c3aa3c672d57a2d6ce6868eeb858ee0337ad72c0b85b0784357332cc8bbcefa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:38:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c3aa3c672d57a2d6ce6868eeb858ee0337ad72c0b85b0784357332cc8bbcefa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:38:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"299899c159ac61e8fe1afb6e48a39a680473c69695b070d91588ceb1d7f2748f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:38:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:38:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["299899c159ac61e8fe1afb6e48a39a680473c69695b070d91588ceb1d7f2748f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:38:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"299899c159ac61e8fe1afb6e48a39a680473c69695b070d91588ceb1d7f2748f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:38:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a7806c15a244201013467784746c527ef1850119bdeed5da1f35832b06aea56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:38:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:38:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:38:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a7806c15a244201013467784746c527ef1850119bdeed5da1f35832b06aea56"} {"level":"info","ts":"2026-07-14T23:38:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a7806c15a244201013467784746c527ef1850119bdeed5da1f35832b06aea56","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:38:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c3aa3c672d57a2d6ce6868eeb858ee0337ad72c0b85b0784357332cc8bbcefa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:38:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:38:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:38:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c3aa3c672d57a2d6ce6868eeb858ee0337ad72c0b85b0784357332cc8bbcefa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:38:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"299899c159ac61e8fe1afb6e48a39a680473c69695b070d91588ceb1d7f2748f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:38:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a7806c15a244201013467784746c527ef1850119bdeed5da1f35832b06aea56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:38:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:38:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2a7806c15a244201013467784746c527ef1850119bdeed5da1f35832b06aea56"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:38:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a7806c15a244201013467784746c527ef1850119bdeed5da1f35832b06aea56","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:38:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"505ccf05aa75ed4bc60294011e7859e3b4f9d3d84d37dbc4bec4711ba383cd0c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:38:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:38:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:38:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c3aa3c672d57a2d6ce6868eeb858ee0337ad72c0b85b0784357332cc8bbcefa"} {"level":"info","ts":"2026-07-14T23:38:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"505ccf05aa75ed4bc60294011e7859e3b4f9d3d84d37dbc4bec4711ba383cd0c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:38:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c3aa3c672d57a2d6ce6868eeb858ee0337ad72c0b85b0784357332cc8bbcefa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:38:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:38:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1c3aa3c672d57a2d6ce6868eeb858ee0337ad72c0b85b0784357332cc8bbcefa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:38:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c3aa3c672d57a2d6ce6868eeb858ee0337ad72c0b85b0784357332cc8bbcefa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:38:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a7806c15a244201013467784746c527ef1850119bdeed5da1f35832b06aea56","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:38:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"505ccf05aa75ed4bc60294011e7859e3b4f9d3d84d37dbc4bec4711ba383cd0c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:38:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c3aa3c672d57a2d6ce6868eeb858ee0337ad72c0b85b0784357332cc8bbcefa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:38:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"505ccf05aa75ed4bc60294011e7859e3b4f9d3d84d37dbc4bec4711ba383cd0c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:38:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/299899c159ac61e8fe1afb6e48a39a680473c69695b070d91588ceb1d7f2748f"} {"level":"debug","ts":"2026-07-14T23:38:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"505ccf05aa75ed4bc60294011e7859e3b4f9d3d84d37dbc4bec4711ba383cd0c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:38:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a7806c15a244201013467784746c527ef1850119bdeed5da1f35832b06aea56"} {"level":"info","ts":"2026-07-14T23:38:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/505ccf05aa75ed4bc60294011e7859e3b4f9d3d84d37dbc4bec4711ba383cd0c"} {"level":"debug","ts":"2026-07-14T23:38:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"505ccf05aa75ed4bc60294011e7859e3b4f9d3d84d37dbc4bec4711ba383cd0c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:38:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:38:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["505ccf05aa75ed4bc60294011e7859e3b4f9d3d84d37dbc4bec4711ba383cd0c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:38:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c3aa3c672d57a2d6ce6868eeb858ee0337ad72c0b85b0784357332cc8bbcefa"} {"level":"info","ts":"2026-07-14T23:38:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"505ccf05aa75ed4bc60294011e7859e3b4f9d3d84d37dbc4bec4711ba383cd0c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:38:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"505ccf05aa75ed4bc60294011e7859e3b4f9d3d84d37dbc4bec4711ba383cd0c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:38:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/505ccf05aa75ed4bc60294011e7859e3b4f9d3d84d37dbc4bec4711ba383cd0c"} {"level":"debug","ts":"2026-07-14T23:39:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"296e359e53d6806998ddc2411020fecf5f1d5d9c96f0f597e480139f60b0e2f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:39:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:39:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:39:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/296e359e53d6806998ddc2411020fecf5f1d5d9c96f0f597e480139f60b0e2f0"} {"level":"info","ts":"2026-07-14T23:39:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"296e359e53d6806998ddc2411020fecf5f1d5d9c96f0f597e480139f60b0e2f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:39:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"296e359e53d6806998ddc2411020fecf5f1d5d9c96f0f597e480139f60b0e2f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:39:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"296e359e53d6806998ddc2411020fecf5f1d5d9c96f0f597e480139f60b0e2f0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:39:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/296e359e53d6806998ddc2411020fecf5f1d5d9c96f0f597e480139f60b0e2f0"} {"level":"debug","ts":"2026-07-14T23:39:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"296e359e53d6806998ddc2411020fecf5f1d5d9c96f0f597e480139f60b0e2f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:39:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:39:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["296e359e53d6806998ddc2411020fecf5f1d5d9c96f0f597e480139f60b0e2f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:39:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"296e359e53d6806998ddc2411020fecf5f1d5d9c96f0f597e480139f60b0e2f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:39:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"296e359e53d6806998ddc2411020fecf5f1d5d9c96f0f597e480139f60b0e2f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:39:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:39:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:39:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"296e359e53d6806998ddc2411020fecf5f1d5d9c96f0f597e480139f60b0e2f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:39:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"296e359e53d6806998ddc2411020fecf5f1d5d9c96f0f597e480139f60b0e2f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:39:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"296e359e53d6806998ddc2411020fecf5f1d5d9c96f0f597e480139f60b0e2f0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:39:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/296e359e53d6806998ddc2411020fecf5f1d5d9c96f0f597e480139f60b0e2f0"} {"level":"debug","ts":"2026-07-14T23:39:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"296e359e53d6806998ddc2411020fecf5f1d5d9c96f0f597e480139f60b0e2f0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:39:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/296e359e53d6806998ddc2411020fecf5f1d5d9c96f0f597e480139f60b0e2f0"} {"level":"debug","ts":"2026-07-14T23:39:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"296e359e53d6806998ddc2411020fecf5f1d5d9c96f0f597e480139f60b0e2f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:39:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:39:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["296e359e53d6806998ddc2411020fecf5f1d5d9c96f0f597e480139f60b0e2f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:39:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"296e359e53d6806998ddc2411020fecf5f1d5d9c96f0f597e480139f60b0e2f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:39:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"296e359e53d6806998ddc2411020fecf5f1d5d9c96f0f597e480139f60b0e2f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:39:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:39:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:39:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"296e359e53d6806998ddc2411020fecf5f1d5d9c96f0f597e480139f60b0e2f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:39:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"296e359e53d6806998ddc2411020fecf5f1d5d9c96f0f597e480139f60b0e2f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:39:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"296e359e53d6806998ddc2411020fecf5f1d5d9c96f0f597e480139f60b0e2f0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:39:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/296e359e53d6806998ddc2411020fecf5f1d5d9c96f0f597e480139f60b0e2f0"} {"level":"debug","ts":"2026-07-14T23:39:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"296e359e53d6806998ddc2411020fecf5f1d5d9c96f0f597e480139f60b0e2f0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:39:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/296e359e53d6806998ddc2411020fecf5f1d5d9c96f0f597e480139f60b0e2f0"} {"level":"debug","ts":"2026-07-14T23:39:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"296e359e53d6806998ddc2411020fecf5f1d5d9c96f0f597e480139f60b0e2f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:39:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:39:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["296e359e53d6806998ddc2411020fecf5f1d5d9c96f0f597e480139f60b0e2f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:39:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"296e359e53d6806998ddc2411020fecf5f1d5d9c96f0f597e480139f60b0e2f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:39:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"296e359e53d6806998ddc2411020fecf5f1d5d9c96f0f597e480139f60b0e2f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:39:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:39:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:39:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"296e359e53d6806998ddc2411020fecf5f1d5d9c96f0f597e480139f60b0e2f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:39:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"296e359e53d6806998ddc2411020fecf5f1d5d9c96f0f597e480139f60b0e2f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:39:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"296e359e53d6806998ddc2411020fecf5f1d5d9c96f0f597e480139f60b0e2f0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:39:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/296e359e53d6806998ddc2411020fecf5f1d5d9c96f0f597e480139f60b0e2f0"} {"level":"debug","ts":"2026-07-14T23:39:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"296e359e53d6806998ddc2411020fecf5f1d5d9c96f0f597e480139f60b0e2f0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:39:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/296e359e53d6806998ddc2411020fecf5f1d5d9c96f0f597e480139f60b0e2f0"} {"level":"debug","ts":"2026-07-14T23:39:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"296e359e53d6806998ddc2411020fecf5f1d5d9c96f0f597e480139f60b0e2f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:39:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:39:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["296e359e53d6806998ddc2411020fecf5f1d5d9c96f0f597e480139f60b0e2f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:39:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"296e359e53d6806998ddc2411020fecf5f1d5d9c96f0f597e480139f60b0e2f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:39:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"296e359e53d6806998ddc2411020fecf5f1d5d9c96f0f597e480139f60b0e2f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:39:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:39:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:39:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"296e359e53d6806998ddc2411020fecf5f1d5d9c96f0f597e480139f60b0e2f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:39:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"296e359e53d6806998ddc2411020fecf5f1d5d9c96f0f597e480139f60b0e2f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:39:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"296e359e53d6806998ddc2411020fecf5f1d5d9c96f0f597e480139f60b0e2f0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:39:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/296e359e53d6806998ddc2411020fecf5f1d5d9c96f0f597e480139f60b0e2f0"} {"level":"debug","ts":"2026-07-14T23:39:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"296e359e53d6806998ddc2411020fecf5f1d5d9c96f0f597e480139f60b0e2f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:39:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ff095973594577c03a3bd837408493970031d7e968432087a0f6a25330fa89b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:39:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/296e359e53d6806998ddc2411020fecf5f1d5d9c96f0f597e480139f60b0e2f0"} {"level":"info","ts":"2026-07-14T23:39:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ff095973594577c03a3bd837408493970031d7e968432087a0f6a25330fa89b"} {"level":"debug","ts":"2026-07-14T23:39:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"296e359e53d6806998ddc2411020fecf5f1d5d9c96f0f597e480139f60b0e2f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:39:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:39:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["296e359e53d6806998ddc2411020fecf5f1d5d9c96f0f597e480139f60b0e2f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:39:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"296e359e53d6806998ddc2411020fecf5f1d5d9c96f0f597e480139f60b0e2f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:39:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"296e359e53d6806998ddc2411020fecf5f1d5d9c96f0f597e480139f60b0e2f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:39:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:39:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:39:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"296e359e53d6806998ddc2411020fecf5f1d5d9c96f0f597e480139f60b0e2f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:39:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"296e359e53d6806998ddc2411020fecf5f1d5d9c96f0f597e480139f60b0e2f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:39:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"296e359e53d6806998ddc2411020fecf5f1d5d9c96f0f597e480139f60b0e2f0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:39:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/296e359e53d6806998ddc2411020fecf5f1d5d9c96f0f597e480139f60b0e2f0"} {"level":"debug","ts":"2026-07-14T23:39:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"296e359e53d6806998ddc2411020fecf5f1d5d9c96f0f597e480139f60b0e2f0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:39:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/296e359e53d6806998ddc2411020fecf5f1d5d9c96f0f597e480139f60b0e2f0"} {"level":"debug","ts":"2026-07-14T23:39:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"296e359e53d6806998ddc2411020fecf5f1d5d9c96f0f597e480139f60b0e2f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:39:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:39:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["296e359e53d6806998ddc2411020fecf5f1d5d9c96f0f597e480139f60b0e2f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:39:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"296e359e53d6806998ddc2411020fecf5f1d5d9c96f0f597e480139f60b0e2f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:39:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"296e359e53d6806998ddc2411020fecf5f1d5d9c96f0f597e480139f60b0e2f0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:39:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/296e359e53d6806998ddc2411020fecf5f1d5d9c96f0f597e480139f60b0e2f0"} {"level":"debug","ts":"2026-07-14T23:39:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"505ccf05aa75ed4bc60294011e7859e3b4f9d3d84d37dbc4bec4711ba383cd0c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:39:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:39:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:39:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"505ccf05aa75ed4bc60294011e7859e3b4f9d3d84d37dbc4bec4711ba383cd0c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:39:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"505ccf05aa75ed4bc60294011e7859e3b4f9d3d84d37dbc4bec4711ba383cd0c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:39:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"505ccf05aa75ed4bc60294011e7859e3b4f9d3d84d37dbc4bec4711ba383cd0c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:39:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/505ccf05aa75ed4bc60294011e7859e3b4f9d3d84d37dbc4bec4711ba383cd0c"} {"level":"debug","ts":"2026-07-14T23:39:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"505ccf05aa75ed4bc60294011e7859e3b4f9d3d84d37dbc4bec4711ba383cd0c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:39:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/505ccf05aa75ed4bc60294011e7859e3b4f9d3d84d37dbc4bec4711ba383cd0c"} {"level":"debug","ts":"2026-07-14T23:39:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"505ccf05aa75ed4bc60294011e7859e3b4f9d3d84d37dbc4bec4711ba383cd0c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:39:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:39:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["505ccf05aa75ed4bc60294011e7859e3b4f9d3d84d37dbc4bec4711ba383cd0c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:39:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"505ccf05aa75ed4bc60294011e7859e3b4f9d3d84d37dbc4bec4711ba383cd0c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:39:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"505ccf05aa75ed4bc60294011e7859e3b4f9d3d84d37dbc4bec4711ba383cd0c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:39:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:39:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:39:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"505ccf05aa75ed4bc60294011e7859e3b4f9d3d84d37dbc4bec4711ba383cd0c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:39:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1cd51e190473aa8c11bf2645dbfaee649470abfd2f16500da09be348c3f18247","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:39:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"505ccf05aa75ed4bc60294011e7859e3b4f9d3d84d37dbc4bec4711ba383cd0c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:39:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"505ccf05aa75ed4bc60294011e7859e3b4f9d3d84d37dbc4bec4711ba383cd0c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:39:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/505ccf05aa75ed4bc60294011e7859e3b4f9d3d84d37dbc4bec4711ba383cd0c"} {"level":"debug","ts":"2026-07-14T23:39:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"505ccf05aa75ed4bc60294011e7859e3b4f9d3d84d37dbc4bec4711ba383cd0c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:39:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:39:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["505ccf05aa75ed4bc60294011e7859e3b4f9d3d84d37dbc4bec4711ba383cd0c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:39:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1cd51e190473aa8c11bf2645dbfaee649470abfd2f16500da09be348c3f18247"} {"level":"info","ts":"2026-07-14T23:39:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"505ccf05aa75ed4bc60294011e7859e3b4f9d3d84d37dbc4bec4711ba383cd0c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:39:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"505ccf05aa75ed4bc60294011e7859e3b4f9d3d84d37dbc4bec4711ba383cd0c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:39:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:39:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:39:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/505ccf05aa75ed4bc60294011e7859e3b4f9d3d84d37dbc4bec4711ba383cd0c"} {"level":"info","ts":"2026-07-14T23:39:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"505ccf05aa75ed4bc60294011e7859e3b4f9d3d84d37dbc4bec4711ba383cd0c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:39:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"505ccf05aa75ed4bc60294011e7859e3b4f9d3d84d37dbc4bec4711ba383cd0c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:39:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"505ccf05aa75ed4bc60294011e7859e3b4f9d3d84d37dbc4bec4711ba383cd0c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:39:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/505ccf05aa75ed4bc60294011e7859e3b4f9d3d84d37dbc4bec4711ba383cd0c"} {"level":"debug","ts":"2026-07-14T23:39:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"505ccf05aa75ed4bc60294011e7859e3b4f9d3d84d37dbc4bec4711ba383cd0c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:39:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/505ccf05aa75ed4bc60294011e7859e3b4f9d3d84d37dbc4bec4711ba383cd0c"} {"level":"debug","ts":"2026-07-14T23:39:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53ab23f9635b11147c40cc42694fc6439fb5c391681b9c2a2e3e14ea036daa73","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:39:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:39:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:39:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53ab23f9635b11147c40cc42694fc6439fb5c391681b9c2a2e3e14ea036daa73","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:39:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53ab23f9635b11147c40cc42694fc6439fb5c391681b9c2a2e3e14ea036daa73","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:39:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53ab23f9635b11147c40cc42694fc6439fb5c391681b9c2a2e3e14ea036daa73","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:39:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53ab23f9635b11147c40cc42694fc6439fb5c391681b9c2a2e3e14ea036daa73"} {"level":"debug","ts":"2026-07-14T23:39:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"505ccf05aa75ed4bc60294011e7859e3b4f9d3d84d37dbc4bec4711ba383cd0c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:39:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:39:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["505ccf05aa75ed4bc60294011e7859e3b4f9d3d84d37dbc4bec4711ba383cd0c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:39:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"505ccf05aa75ed4bc60294011e7859e3b4f9d3d84d37dbc4bec4711ba383cd0c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:39:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"505ccf05aa75ed4bc60294011e7859e3b4f9d3d84d37dbc4bec4711ba383cd0c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:39:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53ab23f9635b11147c40cc42694fc6439fb5c391681b9c2a2e3e14ea036daa73","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:39:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53ab23f9635b11147c40cc42694fc6439fb5c391681b9c2a2e3e14ea036daa73"} {"level":"info","ts":"2026-07-14T23:39:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/505ccf05aa75ed4bc60294011e7859e3b4f9d3d84d37dbc4bec4711ba383cd0c"} {"level":"debug","ts":"2026-07-14T23:39:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53ab23f9635b11147c40cc42694fc6439fb5c391681b9c2a2e3e14ea036daa73","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:39:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:39:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["53ab23f9635b11147c40cc42694fc6439fb5c391681b9c2a2e3e14ea036daa73"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:39:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53ab23f9635b11147c40cc42694fc6439fb5c391681b9c2a2e3e14ea036daa73","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:39:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53ab23f9635b11147c40cc42694fc6439fb5c391681b9c2a2e3e14ea036daa73","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:39:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:39:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:39:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53ab23f9635b11147c40cc42694fc6439fb5c391681b9c2a2e3e14ea036daa73","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:39:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1573b87ef683f20144eeabe3dafa59d6ea5ad4e8e826790e689a5ab916693a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:39:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53ab23f9635b11147c40cc42694fc6439fb5c391681b9c2a2e3e14ea036daa73","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:39:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53ab23f9635b11147c40cc42694fc6439fb5c391681b9c2a2e3e14ea036daa73","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:39:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53ab23f9635b11147c40cc42694fc6439fb5c391681b9c2a2e3e14ea036daa73"} {"level":"debug","ts":"2026-07-14T23:39:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53ab23f9635b11147c40cc42694fc6439fb5c391681b9c2a2e3e14ea036daa73","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:39:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:39:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["53ab23f9635b11147c40cc42694fc6439fb5c391681b9c2a2e3e14ea036daa73"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:39:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1573b87ef683f20144eeabe3dafa59d6ea5ad4e8e826790e689a5ab916693a7"} {"level":"info","ts":"2026-07-14T23:39:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53ab23f9635b11147c40cc42694fc6439fb5c391681b9c2a2e3e14ea036daa73","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:39:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53ab23f9635b11147c40cc42694fc6439fb5c391681b9c2a2e3e14ea036daa73","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:39:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:39:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:39:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53ab23f9635b11147c40cc42694fc6439fb5c391681b9c2a2e3e14ea036daa73"} {"level":"info","ts":"2026-07-14T23:39:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53ab23f9635b11147c40cc42694fc6439fb5c391681b9c2a2e3e14ea036daa73","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:39:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53ab23f9635b11147c40cc42694fc6439fb5c391681b9c2a2e3e14ea036daa73","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:39:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53ab23f9635b11147c40cc42694fc6439fb5c391681b9c2a2e3e14ea036daa73","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:39:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53ab23f9635b11147c40cc42694fc6439fb5c391681b9c2a2e3e14ea036daa73"} {"level":"debug","ts":"2026-07-14T23:39:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53ab23f9635b11147c40cc42694fc6439fb5c391681b9c2a2e3e14ea036daa73","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:39:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53ab23f9635b11147c40cc42694fc6439fb5c391681b9c2a2e3e14ea036daa73"} {"level":"debug","ts":"2026-07-14T23:39:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a7806c15a244201013467784746c527ef1850119bdeed5da1f35832b06aea56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:39:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:39:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:39:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a7806c15a244201013467784746c527ef1850119bdeed5da1f35832b06aea56","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:39:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a7806c15a244201013467784746c527ef1850119bdeed5da1f35832b06aea56","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:39:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a7806c15a244201013467784746c527ef1850119bdeed5da1f35832b06aea56","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:39:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a7806c15a244201013467784746c527ef1850119bdeed5da1f35832b06aea56"} {"level":"debug","ts":"2026-07-14T23:39:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53ab23f9635b11147c40cc42694fc6439fb5c391681b9c2a2e3e14ea036daa73","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:39:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:39:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["53ab23f9635b11147c40cc42694fc6439fb5c391681b9c2a2e3e14ea036daa73"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:39:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53ab23f9635b11147c40cc42694fc6439fb5c391681b9c2a2e3e14ea036daa73","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:39:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53ab23f9635b11147c40cc42694fc6439fb5c391681b9c2a2e3e14ea036daa73","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:39:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a7806c15a244201013467784746c527ef1850119bdeed5da1f35832b06aea56","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:39:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a7806c15a244201013467784746c527ef1850119bdeed5da1f35832b06aea56"} {"level":"info","ts":"2026-07-14T23:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53ab23f9635b11147c40cc42694fc6439fb5c391681b9c2a2e3e14ea036daa73"} {"level":"debug","ts":"2026-07-14T23:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a7806c15a244201013467784746c527ef1850119bdeed5da1f35832b06aea56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:39:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:39:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2a7806c15a244201013467784746c527ef1850119bdeed5da1f35832b06aea56"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a7806c15a244201013467784746c527ef1850119bdeed5da1f35832b06aea56","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a7806c15a244201013467784746c527ef1850119bdeed5da1f35832b06aea56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:39:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:39:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a7806c15a244201013467784746c527ef1850119bdeed5da1f35832b06aea56","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d8b679a1fe3a9e6264decd2dd5f64d76f0cdd5a5ca50229274f02a8508db7d8b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a7806c15a244201013467784746c527ef1850119bdeed5da1f35832b06aea56","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a7806c15a244201013467784746c527ef1850119bdeed5da1f35832b06aea56","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a7806c15a244201013467784746c527ef1850119bdeed5da1f35832b06aea56"} {"level":"debug","ts":"2026-07-14T23:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a7806c15a244201013467784746c527ef1850119bdeed5da1f35832b06aea56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:39:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:39:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2a7806c15a244201013467784746c527ef1850119bdeed5da1f35832b06aea56"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d8b679a1fe3a9e6264decd2dd5f64d76f0cdd5a5ca50229274f02a8508db7d8b"} {"level":"info","ts":"2026-07-14T23:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a7806c15a244201013467784746c527ef1850119bdeed5da1f35832b06aea56","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a7806c15a244201013467784746c527ef1850119bdeed5da1f35832b06aea56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:39:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:39:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a7806c15a244201013467784746c527ef1850119bdeed5da1f35832b06aea56"} {"level":"info","ts":"2026-07-14T23:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a7806c15a244201013467784746c527ef1850119bdeed5da1f35832b06aea56","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a7806c15a244201013467784746c527ef1850119bdeed5da1f35832b06aea56","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a7806c15a244201013467784746c527ef1850119bdeed5da1f35832b06aea56","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a7806c15a244201013467784746c527ef1850119bdeed5da1f35832b06aea56"} {"level":"debug","ts":"2026-07-14T23:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a7806c15a244201013467784746c527ef1850119bdeed5da1f35832b06aea56","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a7806c15a244201013467784746c527ef1850119bdeed5da1f35832b06aea56"} {"level":"debug","ts":"2026-07-14T23:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"042471f975b0ed4d042f6232264c48bbf7e816195824969258946ca0d03cfe3a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:39:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:39:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"042471f975b0ed4d042f6232264c48bbf7e816195824969258946ca0d03cfe3a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"042471f975b0ed4d042f6232264c48bbf7e816195824969258946ca0d03cfe3a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"042471f975b0ed4d042f6232264c48bbf7e816195824969258946ca0d03cfe3a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/042471f975b0ed4d042f6232264c48bbf7e816195824969258946ca0d03cfe3a"} {"level":"debug","ts":"2026-07-14T23:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a7806c15a244201013467784746c527ef1850119bdeed5da1f35832b06aea56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:39:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:39:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2a7806c15a244201013467784746c527ef1850119bdeed5da1f35832b06aea56"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a7806c15a244201013467784746c527ef1850119bdeed5da1f35832b06aea56","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a7806c15a244201013467784746c527ef1850119bdeed5da1f35832b06aea56","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"042471f975b0ed4d042f6232264c48bbf7e816195824969258946ca0d03cfe3a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"042471f975b0ed4d042f6232264c48bbf7e816195824969258946ca0d03cfe3a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/042471f975b0ed4d042f6232264c48bbf7e816195824969258946ca0d03cfe3a"} {"level":"debug","ts":"2026-07-14T23:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c3aa3c672d57a2d6ce6868eeb858ee0337ad72c0b85b0784357332cc8bbcefa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a7806c15a244201013467784746c527ef1850119bdeed5da1f35832b06aea56"} {"level":"info","ts":"2026-07-14T23:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c3aa3c672d57a2d6ce6868eeb858ee0337ad72c0b85b0784357332cc8bbcefa"} {"level":"debug","ts":"2026-07-14T23:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"042471f975b0ed4d042f6232264c48bbf7e816195824969258946ca0d03cfe3a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:39:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:39:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["042471f975b0ed4d042f6232264c48bbf7e816195824969258946ca0d03cfe3a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"042471f975b0ed4d042f6232264c48bbf7e816195824969258946ca0d03cfe3a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"042471f975b0ed4d042f6232264c48bbf7e816195824969258946ca0d03cfe3a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:39:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:39:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"042471f975b0ed4d042f6232264c48bbf7e816195824969258946ca0d03cfe3a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cae086f2dfc373e5aad98209a1a1cc4a7a4fd8bab9b2c0e3f0785b8028ec7c58","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"042471f975b0ed4d042f6232264c48bbf7e816195824969258946ca0d03cfe3a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"042471f975b0ed4d042f6232264c48bbf7e816195824969258946ca0d03cfe3a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/042471f975b0ed4d042f6232264c48bbf7e816195824969258946ca0d03cfe3a"} {"level":"debug","ts":"2026-07-14T23:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"042471f975b0ed4d042f6232264c48bbf7e816195824969258946ca0d03cfe3a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:39:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:39:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["042471f975b0ed4d042f6232264c48bbf7e816195824969258946ca0d03cfe3a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cae086f2dfc373e5aad98209a1a1cc4a7a4fd8bab9b2c0e3f0785b8028ec7c58"} {"level":"info","ts":"2026-07-14T23:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"042471f975b0ed4d042f6232264c48bbf7e816195824969258946ca0d03cfe3a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"042471f975b0ed4d042f6232264c48bbf7e816195824969258946ca0d03cfe3a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:39:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:39:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/042471f975b0ed4d042f6232264c48bbf7e816195824969258946ca0d03cfe3a"} {"level":"info","ts":"2026-07-14T23:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"042471f975b0ed4d042f6232264c48bbf7e816195824969258946ca0d03cfe3a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"042471f975b0ed4d042f6232264c48bbf7e816195824969258946ca0d03cfe3a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"042471f975b0ed4d042f6232264c48bbf7e816195824969258946ca0d03cfe3a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/042471f975b0ed4d042f6232264c48bbf7e816195824969258946ca0d03cfe3a"} {"level":"debug","ts":"2026-07-14T23:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"042471f975b0ed4d042f6232264c48bbf7e816195824969258946ca0d03cfe3a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/042471f975b0ed4d042f6232264c48bbf7e816195824969258946ca0d03cfe3a"} {"level":"debug","ts":"2026-07-14T23:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"deda8794ed1757dc64a174fcf76059ddb717cd85c45423afa5a01edd6239d7fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:39:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:39:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"deda8794ed1757dc64a174fcf76059ddb717cd85c45423afa5a01edd6239d7fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"deda8794ed1757dc64a174fcf76059ddb717cd85c45423afa5a01edd6239d7fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"625da130b7844f37c52b6579827e9631158e4f6a772c8560dab930fee000b975","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"deda8794ed1757dc64a174fcf76059ddb717cd85c45423afa5a01edd6239d7fa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/deda8794ed1757dc64a174fcf76059ddb717cd85c45423afa5a01edd6239d7fa"} {"level":"debug","ts":"2026-07-14T23:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"042471f975b0ed4d042f6232264c48bbf7e816195824969258946ca0d03cfe3a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:39:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:39:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["042471f975b0ed4d042f6232264c48bbf7e816195824969258946ca0d03cfe3a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"042471f975b0ed4d042f6232264c48bbf7e816195824969258946ca0d03cfe3a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"054334e45417a2d41d1c6055ddf7eda34a9b868cf4bc38898ee6794861811b77","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"042471f975b0ed4d042f6232264c48bbf7e816195824969258946ca0d03cfe3a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"deda8794ed1757dc64a174fcf76059ddb717cd85c45423afa5a01edd6239d7fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:39:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:39:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["deda8794ed1757dc64a174fcf76059ddb717cd85c45423afa5a01edd6239d7fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/625da130b7844f37c52b6579827e9631158e4f6a772c8560dab930fee000b975"} {"level":"info","ts":"2026-07-14T23:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"deda8794ed1757dc64a174fcf76059ddb717cd85c45423afa5a01edd6239d7fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"deda8794ed1757dc64a174fcf76059ddb717cd85c45423afa5a01edd6239d7fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:39:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:39:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/deda8794ed1757dc64a174fcf76059ddb717cd85c45423afa5a01edd6239d7fa"} {"level":"info","ts":"2026-07-14T23:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"deda8794ed1757dc64a174fcf76059ddb717cd85c45423afa5a01edd6239d7fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"deda8794ed1757dc64a174fcf76059ddb717cd85c45423afa5a01edd6239d7fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:39:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:39:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["deda8794ed1757dc64a174fcf76059ddb717cd85c45423afa5a01edd6239d7fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"deda8794ed1757dc64a174fcf76059ddb717cd85c45423afa5a01edd6239d7fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"deda8794ed1757dc64a174fcf76059ddb717cd85c45423afa5a01edd6239d7fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:39:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:39:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["deda8794ed1757dc64a174fcf76059ddb717cd85c45423afa5a01edd6239d7fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-14T23:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"deda8794ed1757dc64a174fcf76059ddb717cd85c45423afa5a01edd6239d7fa","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"deda8794ed1757dc64a174fcf76059ddb717cd85c45423afa5a01edd6239d7fa\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T23:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"deda8794ed1757dc64a174fcf76059ddb717cd85c45423afa5a01edd6239d7fa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/054334e45417a2d41d1c6055ddf7eda34a9b868cf4bc38898ee6794861811b77"} {"level":"debug","ts":"2026-07-14T23:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"deda8794ed1757dc64a174fcf76059ddb717cd85c45423afa5a01edd6239d7fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15cc5574504468bce78c3166c0407be52fc11c290b9fcc1a3164a6fe010e96ea","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/042471f975b0ed4d042f6232264c48bbf7e816195824969258946ca0d03cfe3a"} {"level":"debug","ts":"2026-07-14T23:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"05bef56f924dc4119fa0e9c7a767605af576f7ee24b9e4e8016cae5797561c01","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4292631a1ab2c940425198a75b28fff7ddafdefa8645d71d6f517474909f1c1d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/deda8794ed1757dc64a174fcf76059ddb717cd85c45423afa5a01edd6239d7fa"} {"level":"info","ts":"2026-07-14T23:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15cc5574504468bce78c3166c0407be52fc11c290b9fcc1a3164a6fe010e96ea"} {"level":"info","ts":"2026-07-14T23:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/05bef56f924dc4119fa0e9c7a767605af576f7ee24b9e4e8016cae5797561c01"} {"level":"info","ts":"2026-07-14T23:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4292631a1ab2c940425198a75b28fff7ddafdefa8645d71d6f517474909f1c1d"} {"level":"debug","ts":"2026-07-14T23:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f5d8178ddeba6a3dfbb6ef0dee0ccff2410abad57be465bdfd0d4f7d58d965c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:39:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:39:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f5d8178ddeba6a3dfbb6ef0dee0ccff2410abad57be465bdfd0d4f7d58d965c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f5d8178ddeba6a3dfbb6ef0dee0ccff2410abad57be465bdfd0d4f7d58d965c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fce480d53bf9fc7ca5dc52e785b753389c4af79b8270757b306be6734c57a974","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f5d8178ddeba6a3dfbb6ef0dee0ccff2410abad57be465bdfd0d4f7d58d965c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f5d8178ddeba6a3dfbb6ef0dee0ccff2410abad57be465bdfd0d4f7d58d965c"} {"level":"debug","ts":"2026-07-14T23:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5fad47ffc1d8c69c4202dba81340880877bd8073d47e151e598706074623c291","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f5d8178ddeba6a3dfbb6ef0dee0ccff2410abad57be465bdfd0d4f7d58d965c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:39:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:39:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f5d8178ddeba6a3dfbb6ef0dee0ccff2410abad57be465bdfd0d4f7d58d965c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fce480d53bf9fc7ca5dc52e785b753389c4af79b8270757b306be6734c57a974"} {"level":"info","ts":"2026-07-14T23:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f5d8178ddeba6a3dfbb6ef0dee0ccff2410abad57be465bdfd0d4f7d58d965c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac62eb9c4be31f1daac144b20e4afdb1ba57a9a991c471820856d85b22a42336","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f5d8178ddeba6a3dfbb6ef0dee0ccff2410abad57be465bdfd0d4f7d58d965c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:39:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:39:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f5d8178ddeba6a3dfbb6ef0dee0ccff2410abad57be465bdfd0d4f7d58d965c"} {"level":"info","ts":"2026-07-14T23:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f5d8178ddeba6a3dfbb6ef0dee0ccff2410abad57be465bdfd0d4f7d58d965c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"20074b64f0086a356b1519bbbfe7ebb80bb8ee9794ba55311d3c98dcf9498314","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f5d8178ddeba6a3dfbb6ef0dee0ccff2410abad57be465bdfd0d4f7d58d965c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:39:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:39:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f5d8178ddeba6a3dfbb6ef0dee0ccff2410abad57be465bdfd0d4f7d58d965c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f5d8178ddeba6a3dfbb6ef0dee0ccff2410abad57be465bdfd0d4f7d58d965c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f5d8178ddeba6a3dfbb6ef0dee0ccff2410abad57be465bdfd0d4f7d58d965c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:39:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:39:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f5d8178ddeba6a3dfbb6ef0dee0ccff2410abad57be465bdfd0d4f7d58d965c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5fad47ffc1d8c69c4202dba81340880877bd8073d47e151e598706074623c291"} {"level":"error","ts":"2026-07-14T23:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5f5d8178ddeba6a3dfbb6ef0dee0ccff2410abad57be465bdfd0d4f7d58d965c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5f5d8178ddeba6a3dfbb6ef0dee0ccff2410abad57be465bdfd0d4f7d58d965c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T23:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f5d8178ddeba6a3dfbb6ef0dee0ccff2410abad57be465bdfd0d4f7d58d965c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f5d8178ddeba6a3dfbb6ef0dee0ccff2410abad57be465bdfd0d4f7d58d965c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"299899c159ac61e8fe1afb6e48a39a680473c69695b070d91588ceb1d7f2748f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac62eb9c4be31f1daac144b20e4afdb1ba57a9a991c471820856d85b22a42336"} {"level":"debug","ts":"2026-07-14T23:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec692abeef6bbe3054e9f08e6f9bf1397cc1bbc93c94d9e59eb5ca91d6863f45","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f5d8178ddeba6a3dfbb6ef0dee0ccff2410abad57be465bdfd0d4f7d58d965c"} {"level":"info","ts":"2026-07-14T23:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20074b64f0086a356b1519bbbfe7ebb80bb8ee9794ba55311d3c98dcf9498314"} {"level":"info","ts":"2026-07-14T23:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/299899c159ac61e8fe1afb6e48a39a680473c69695b070d91588ceb1d7f2748f"} {"level":"info","ts":"2026-07-14T23:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec692abeef6bbe3054e9f08e6f9bf1397cc1bbc93c94d9e59eb5ca91d6863f45"} {"level":"info","ts":"2026-07-14T23:39:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"904123b1-f374-4567-980d-336a584f9a8e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:34420","PortSpecifier":{"PortValue":34420}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"904123b1-f374-4567-980d-336a584f9a8e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-d62786.apps.e22d099d-c588-4592-b2f9-ac051f108d63.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T23:39:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"904123b1-f374-4567-980d-336a584f9a8e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:34420","PortSpecifier":{"PortValue":34420}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784072351,"nanos":822261943},"http":{"id":"904123b1-f374-4567-980d-336a584f9a8e","method":"POST","headers":{":authority":"e2e-shared-a-d62786.apps.e22d099d-c588-4592-b2f9-ac051f108d63.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T23:39:11Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"904123b1-f374-4567-980d-336a584f9a8e","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T23:39:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"904123b1-f374-4567-980d-336a584f9a8e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9f6cdc29-bd79-4ecd-b194-a17f6a500fce","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=97f58e18-e78c-4dbe-93a2-70a7ad5158e0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ac051f108d63"]}} {"level":"debug","ts":"2026-07-14T23:39:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"904123b1-f374-4567-980d-336a584f9a8e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ac051f108d63"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=97f58e18-e78c-4dbe-93a2-70a7ad5158e0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9f6cdc29-bd79-4ecd-b194-a17f6a500fce","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5fad47ffc1d8c69c4202dba81340880877bd8073d47e151e598706074623c291"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-d62786.apps.e22d099d-c588-4592-b2f9-ac051f108d63.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T23:39:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"904123b1-f374-4567-980d-336a584f9a8e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T23:39:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"904123b1-f374-4567-980d-336a584f9a8e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T23:39:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"904123b1-f374-4567-980d-336a584f9a8e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d62786/sub-test-model-d62786\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d62786/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T23:39:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"904123b1-f374-4567-980d-336a584f9a8e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T23:39:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"904123b1-f374-4567-980d-336a584f9a8e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T23:39:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"904123b1-f374-4567-980d-336a584f9a8e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-14T23:39:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"904123b1-f374-4567-980d-336a584f9a8e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T23:39:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"904123b1-f374-4567-980d-336a584f9a8e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T23:39:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a3cf8a90-4f38-4856-972d-afc66598711f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:47030","PortSpecifier":{"PortValue":47030}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a3cf8a90-4f38-4856-972d-afc66598711f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-638b58.apps.e22d099d-c588-4592-b2f9-ac051f108d63.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T23:39:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a3cf8a90-4f38-4856-972d-afc66598711f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:47030","PortSpecifier":{"PortValue":47030}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784072351,"nanos":861481338},"http":{"id":"a3cf8a90-4f38-4856-972d-afc66598711f","method":"POST","headers":{":authority":"e2e-shared-b-638b58.apps.e22d099d-c588-4592-b2f9-ac051f108d63.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T23:39:11Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a3cf8a90-4f38-4856-972d-afc66598711f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T23:39:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a3cf8a90-4f38-4856-972d-afc66598711f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9f6cdc29-bd79-4ecd-b194-a17f6a500fce","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=97f58e18-e78c-4dbe-93a2-70a7ad5158e0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ac051f108d63"]}} {"level":"debug","ts":"2026-07-14T23:39:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a3cf8a90-4f38-4856-972d-afc66598711f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ac051f108d63"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=97f58e18-e78c-4dbe-93a2-70a7ad5158e0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9f6cdc29-bd79-4ecd-b194-a17f6a500fce","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"cae086f2dfc373e5aad98209a1a1cc4a7a4fd8bab9b2c0e3f0785b8028ec7c58"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-638b58.apps.e22d099d-c588-4592-b2f9-ac051f108d63.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T23:39:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a3cf8a90-4f38-4856-972d-afc66598711f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T23:39:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a3cf8a90-4f38-4856-972d-afc66598711f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T23:39:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a3cf8a90-4f38-4856-972d-afc66598711f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-638b58/sub-test-model-638b58\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-638b58/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T23:39:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a3cf8a90-4f38-4856-972d-afc66598711f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T23:39:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a3cf8a90-4f38-4856-972d-afc66598711f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T23:39:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a3cf8a90-4f38-4856-972d-afc66598711f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T23:39:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a3cf8a90-4f38-4856-972d-afc66598711f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T23:39:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a3cf8a90-4f38-4856-972d-afc66598711f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T23:39:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"00cd67cb-30cc-4cc8-9bb7-4d6c2d19827a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:34426","PortSpecifier":{"PortValue":34426}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"00cd67cb-30cc-4cc8-9bb7-4d6c2d19827a","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-d62786.apps.e22d099d-c588-4592-b2f9-ac051f108d63.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T23:39:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"00cd67cb-30cc-4cc8-9bb7-4d6c2d19827a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:34426","PortSpecifier":{"PortValue":34426}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784072351,"nanos":895049033},"http":{"id":"00cd67cb-30cc-4cc8-9bb7-4d6c2d19827a","method":"GET","headers":{":authority":"e2e-shared-a-d62786.apps.e22d099d-c588-4592-b2f9-ac051f108d63.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T23:39:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"00cd67cb-30cc-4cc8-9bb7-4d6c2d19827a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-12ZJ1lo1JC8PClShD_vqCQO685A2rFyWSc10bshsNTwWeL9x0557JW3bVdKZV"} {"level":"debug","ts":"2026-07-14T23:39:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"00cd67cb-30cc-4cc8-9bb7-4d6c2d19827a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d62786.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-12ZJ1lo1JC8PClShD_vqCQO685A2rFyWSc10bshsNTwWeL9x0557JW3bVdKZV\"}"} {"level":"debug","ts":"2026-07-14T23:39:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"00cd67cb-30cc-4cc8-9bb7-4d6c2d19827a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d62786.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c7a80512-6682-402a-9b0b-a0fddd348775","keyName":"e2e-sub-iso-eec796","subscription":"e2e-a-only-0afac6","tenant":"e2e-shared-a-d62786","userId":"c7a80512-6682-402a-9b0b-a0fddd348775","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T23:39:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"00cd67cb-30cc-4cc8-9bb7-4d6c2d19827a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T23:39:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"00cd67cb-30cc-4cc8-9bb7-4d6c2d19827a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T23:39:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"00cd67cb-30cc-4cc8-9bb7-4d6c2d19827a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T23:39:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"00cd67cb-30cc-4cc8-9bb7-4d6c2d19827a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d62786/sub-test-model-d62786\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d62786/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T23:39:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"00cd67cb-30cc-4cc8-9bb7-4d6c2d19827a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T23:39:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"00cd67cb-30cc-4cc8-9bb7-4d6c2d19827a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-14T23:39:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"00cd67cb-30cc-4cc8-9bb7-4d6c2d19827a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-0afac6"} {"level":"debug","ts":"2026-07-14T23:39:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"00cd67cb-30cc-4cc8-9bb7-4d6c2d19827a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T23:39:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"00cd67cb-30cc-4cc8-9bb7-4d6c2d19827a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T23:39:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"00cd67cb-30cc-4cc8-9bb7-4d6c2d19827a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T23:39:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"64580d81-c29d-440b-a8f5-0414f632de4a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:47046","PortSpecifier":{"PortValue":47046}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"64580d81-c29d-440b-a8f5-0414f632de4a","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-638b58.apps.e22d099d-c588-4592-b2f9-ac051f108d63.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T23:39:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"64580d81-c29d-440b-a8f5-0414f632de4a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:47046","PortSpecifier":{"PortValue":47046}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784072351,"nanos":932161094},"http":{"id":"64580d81-c29d-440b-a8f5-0414f632de4a","method":"GET","headers":{":authority":"e2e-shared-b-638b58.apps.e22d099d-c588-4592-b2f9-ac051f108d63.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T23:39:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"64580d81-c29d-440b-a8f5-0414f632de4a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1QHuA4Bcb7t2nEDD4_XaFp2zyj8lhMsFkfdIIfFX3AM2ethnkTGyHQetx1JE5"} {"level":"debug","ts":"2026-07-14T23:39:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"64580d81-c29d-440b-a8f5-0414f632de4a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-638b58.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1QHuA4Bcb7t2nEDD4_XaFp2zyj8lhMsFkfdIIfFX3AM2ethnkTGyHQetx1JE5\"}"} {"level":"debug","ts":"2026-07-14T23:39:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"64580d81-c29d-440b-a8f5-0414f632de4a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-638b58.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"bcebbaee-5e40-4f70-9911-f0b4f3850a97","keyName":"e2e-sub-iso-4d8fff","subscription":"e2e-b-only-0afac6","tenant":"e2e-shared-b-638b58","userId":"bcebbaee-5e40-4f70-9911-f0b4f3850a97","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T23:39:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"64580d81-c29d-440b-a8f5-0414f632de4a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T23:39:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"64580d81-c29d-440b-a8f5-0414f632de4a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T23:39:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"64580d81-c29d-440b-a8f5-0414f632de4a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T23:39:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"64580d81-c29d-440b-a8f5-0414f632de4a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-638b58/sub-test-model-638b58\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-638b58/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T23:39:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"64580d81-c29d-440b-a8f5-0414f632de4a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T23:39:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"64580d81-c29d-440b-a8f5-0414f632de4a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T23:39:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"64580d81-c29d-440b-a8f5-0414f632de4a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-14T23:39:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"64580d81-c29d-440b-a8f5-0414f632de4a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-0afac6"} {"level":"info","ts":"2026-07-14T23:39:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"64580d81-c29d-440b-a8f5-0414f632de4a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T23:39:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"64580d81-c29d-440b-a8f5-0414f632de4a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T23:39:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7fc18504-5c0c-4108-9c67-9fc4e802f921","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:49986","PortSpecifier":{"PortValue":49986}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7fc18504-5c0c-4108-9c67-9fc4e802f921","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-d62786.apps.e22d099d-c588-4592-b2f9-ac051f108d63.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T23:39:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7fc18504-5c0c-4108-9c67-9fc4e802f921","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:49986","PortSpecifier":{"PortValue":49986}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784072370,"nanos":510264193},"http":{"id":"7fc18504-5c0c-4108-9c67-9fc4e802f921","method":"POST","headers":{":authority":"e2e-shared-a-d62786.apps.e22d099d-c588-4592-b2f9-ac051f108d63.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T23:39:30Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7fc18504-5c0c-4108-9c67-9fc4e802f921","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T23:39:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7fc18504-5c0c-4108-9c67-9fc4e802f921","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9f6cdc29-bd79-4ecd-b194-a17f6a500fce","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=97f58e18-e78c-4dbe-93a2-70a7ad5158e0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ac051f108d63"]}} {"level":"debug","ts":"2026-07-14T23:39:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7fc18504-5c0c-4108-9c67-9fc4e802f921","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ac051f108d63"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=97f58e18-e78c-4dbe-93a2-70a7ad5158e0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9f6cdc29-bd79-4ecd-b194-a17f6a500fce","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5fad47ffc1d8c69c4202dba81340880877bd8073d47e151e598706074623c291"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-d62786.apps.e22d099d-c588-4592-b2f9-ac051f108d63.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T23:39:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7fc18504-5c0c-4108-9c67-9fc4e802f921","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T23:39:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7fc18504-5c0c-4108-9c67-9fc4e802f921","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T23:39:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7fc18504-5c0c-4108-9c67-9fc4e802f921","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d62786/sub-test-model-d62786\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d62786/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T23:39:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7fc18504-5c0c-4108-9c67-9fc4e802f921","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T23:39:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7fc18504-5c0c-4108-9c67-9fc4e802f921","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T23:39:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7fc18504-5c0c-4108-9c67-9fc4e802f921","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T23:39:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7fc18504-5c0c-4108-9c67-9fc4e802f921","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T23:39:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7fc18504-5c0c-4108-9c67-9fc4e802f921","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T23:39:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d3ada1e3-8eb9-4e6b-821c-d661e813eedd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:57644","PortSpecifier":{"PortValue":57644}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d3ada1e3-8eb9-4e6b-821c-d661e813eedd","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-638b58.apps.e22d099d-c588-4592-b2f9-ac051f108d63.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T23:39:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d3ada1e3-8eb9-4e6b-821c-d661e813eedd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:57644","PortSpecifier":{"PortValue":57644}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784072370,"nanos":544211323},"http":{"id":"d3ada1e3-8eb9-4e6b-821c-d661e813eedd","method":"POST","headers":{":authority":"e2e-shared-b-638b58.apps.e22d099d-c588-4592-b2f9-ac051f108d63.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T23:39:30Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d3ada1e3-8eb9-4e6b-821c-d661e813eedd","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T23:39:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d3ada1e3-8eb9-4e6b-821c-d661e813eedd","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9f6cdc29-bd79-4ecd-b194-a17f6a500fce","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=97f58e18-e78c-4dbe-93a2-70a7ad5158e0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ac051f108d63"]}} {"level":"debug","ts":"2026-07-14T23:39:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d3ada1e3-8eb9-4e6b-821c-d661e813eedd","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ac051f108d63"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=97f58e18-e78c-4dbe-93a2-70a7ad5158e0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9f6cdc29-bd79-4ecd-b194-a17f6a500fce","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"cae086f2dfc373e5aad98209a1a1cc4a7a4fd8bab9b2c0e3f0785b8028ec7c58"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-638b58.apps.e22d099d-c588-4592-b2f9-ac051f108d63.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T23:39:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d3ada1e3-8eb9-4e6b-821c-d661e813eedd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T23:39:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d3ada1e3-8eb9-4e6b-821c-d661e813eedd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T23:39:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d3ada1e3-8eb9-4e6b-821c-d661e813eedd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-638b58/sub-test-model-638b58\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-638b58/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T23:39:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d3ada1e3-8eb9-4e6b-821c-d661e813eedd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T23:39:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d3ada1e3-8eb9-4e6b-821c-d661e813eedd","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T23:39:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d3ada1e3-8eb9-4e6b-821c-d661e813eedd","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T23:39:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d3ada1e3-8eb9-4e6b-821c-d661e813eedd","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T23:39:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d3ada1e3-8eb9-4e6b-821c-d661e813eedd","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T23:39:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"adf860dd-5c9a-47f5-864f-7aafdca97e16","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:49998","PortSpecifier":{"PortValue":49998}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"adf860dd-5c9a-47f5-864f-7aafdca97e16","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-d62786.apps.e22d099d-c588-4592-b2f9-ac051f108d63.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T23:39:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"adf860dd-5c9a-47f5-864f-7aafdca97e16","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:49998","PortSpecifier":{"PortValue":49998}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784072370,"nanos":577012711},"http":{"id":"adf860dd-5c9a-47f5-864f-7aafdca97e16","method":"POST","headers":{":authority":"e2e-shared-a-d62786.apps.e22d099d-c588-4592-b2f9-ac051f108d63.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T23:39:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"adf860dd-5c9a-47f5-864f-7aafdca97e16","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-6WAHXa8wmJ10ko71_jUD9aAK5lfLIqQeMrlVazKxyLMOM0Tz5c9AnbpfLNJW"} {"level":"debug","ts":"2026-07-14T23:39:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"adf860dd-5c9a-47f5-864f-7aafdca97e16","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d62786.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-6WAHXa8wmJ10ko71_jUD9aAK5lfLIqQeMrlVazKxyLMOM0Tz5c9AnbpfLNJW\"}"} {"level":"debug","ts":"2026-07-14T23:39:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"adf860dd-5c9a-47f5-864f-7aafdca97e16","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d62786.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ce1ac83d-0b71-420b-8d65-c1685d5c6aed","keyName":"e2e-sub-iso-ba66ed","subscription":"e2e-shared-sub-21a7e5","tenant":"e2e-shared-a-d62786","userId":"ce1ac83d-0b71-420b-8d65-c1685d5c6aed","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T23:39:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"adf860dd-5c9a-47f5-864f-7aafdca97e16","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T23:39:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"adf860dd-5c9a-47f5-864f-7aafdca97e16","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T23:39:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"adf860dd-5c9a-47f5-864f-7aafdca97e16","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T23:39:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"adf860dd-5c9a-47f5-864f-7aafdca97e16","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d62786/sub-test-model-d62786\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d62786/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T23:39:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"adf860dd-5c9a-47f5-864f-7aafdca97e16","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-14T23:39:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"adf860dd-5c9a-47f5-864f-7aafdca97e16","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T23:39:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"adf860dd-5c9a-47f5-864f-7aafdca97e16","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T23:39:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"adf860dd-5c9a-47f5-864f-7aafdca97e16","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-21a7e5"} {"level":"info","ts":"2026-07-14T23:39:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"adf860dd-5c9a-47f5-864f-7aafdca97e16","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T23:39:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"adf860dd-5c9a-47f5-864f-7aafdca97e16","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T23:39:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"058f5c92-f855-420d-b746-6875dee16c2d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:57650","PortSpecifier":{"PortValue":57650}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"058f5c92-f855-420d-b746-6875dee16c2d","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-638b58.apps.e22d099d-c588-4592-b2f9-ac051f108d63.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T23:39:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"058f5c92-f855-420d-b746-6875dee16c2d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:57650","PortSpecifier":{"PortValue":57650}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784072370,"nanos":604190809},"http":{"id":"058f5c92-f855-420d-b746-6875dee16c2d","method":"POST","headers":{":authority":"e2e-shared-b-638b58.apps.e22d099d-c588-4592-b2f9-ac051f108d63.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T23:39:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"058f5c92-f855-420d-b746-6875dee16c2d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1XQ7S8XQO8607fySM_YMFLZ1x7MaAU7Udwjh1nkf1a6VDTg1mBq86GXBqf1cC"} {"level":"debug","ts":"2026-07-14T23:39:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"058f5c92-f855-420d-b746-6875dee16c2d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-638b58.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1XQ7S8XQO8607fySM_YMFLZ1x7MaAU7Udwjh1nkf1a6VDTg1mBq86GXBqf1cC\"}"} {"level":"debug","ts":"2026-07-14T23:39:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"058f5c92-f855-420d-b746-6875dee16c2d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-638b58.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"33781a46-d4c9-4679-ac42-9c40007630f7","keyName":"e2e-sub-iso-97c4b2","subscription":"e2e-shared-sub-21a7e5","tenant":"e2e-shared-b-638b58","userId":"33781a46-d4c9-4679-ac42-9c40007630f7","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T23:39:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"058f5c92-f855-420d-b746-6875dee16c2d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T23:39:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"058f5c92-f855-420d-b746-6875dee16c2d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T23:39:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"058f5c92-f855-420d-b746-6875dee16c2d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T23:39:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"058f5c92-f855-420d-b746-6875dee16c2d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-638b58/sub-test-model-638b58\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-638b58/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T23:39:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"058f5c92-f855-420d-b746-6875dee16c2d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T23:39:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"058f5c92-f855-420d-b746-6875dee16c2d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-21a7e5"} {"level":"debug","ts":"2026-07-14T23:39:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"058f5c92-f855-420d-b746-6875dee16c2d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T23:39:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"058f5c92-f855-420d-b746-6875dee16c2d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-14T23:39:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"058f5c92-f855-420d-b746-6875dee16c2d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T23:39:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"058f5c92-f855-420d-b746-6875dee16c2d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T23:39:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/05bef56f924dc4119fa0e9c7a767605af576f7ee24b9e4e8016cae5797561c01"} {"level":"info","ts":"2026-07-14T23:39:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/15cc5574504468bce78c3166c0407be52fc11c290b9fcc1a3164a6fe010e96ea"} {"level":"info","ts":"2026-07-14T23:39:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/296e359e53d6806998ddc2411020fecf5f1d5d9c96f0f597e480139f60b0e2f0"} {"level":"info","ts":"2026-07-14T23:39:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1cd51e190473aa8c11bf2645dbfaee649470abfd2f16500da09be348c3f18247"} {"level":"info","ts":"2026-07-14T23:39:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3ff095973594577c03a3bd837408493970031d7e968432087a0f6a25330fa89b"} {"level":"info","ts":"2026-07-14T23:39:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/deda8794ed1757dc64a174fcf76059ddb717cd85c45423afa5a01edd6239d7fa"} {"level":"info","ts":"2026-07-14T23:39:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ac62eb9c4be31f1daac144b20e4afdb1ba57a9a991c471820856d85b22a42336"} {"level":"info","ts":"2026-07-14T23:39:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ec692abeef6bbe3054e9f08e6f9bf1397cc1bbc93c94d9e59eb5ca91d6863f45"} {"level":"debug","ts":"2026-07-14T23:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c1bcf011424fb4a84909d5dd38bae1fec0e8995c2b1eb2b80d6c74fd2e3969a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:39:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:39:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c1bcf011424fb4a84909d5dd38bae1fec0e8995c2b1eb2b80d6c74fd2e3969a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c1bcf011424fb4a84909d5dd38bae1fec0e8995c2b1eb2b80d6c74fd2e3969a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86061b69201a18a2247e6742e46218ef8a2176e145bcb9453ba66a9b6bb35dbc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:39:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:39:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c1bcf011424fb4a84909d5dd38bae1fec0e8995c2b1eb2b80d6c74fd2e3969a"} {"level":"info","ts":"2026-07-14T23:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86061b69201a18a2247e6742e46218ef8a2176e145bcb9453ba66a9b6bb35dbc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c1bcf011424fb4a84909d5dd38bae1fec0e8995c2b1eb2b80d6c74fd2e3969a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:39:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:39:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9c1bcf011424fb4a84909d5dd38bae1fec0e8995c2b1eb2b80d6c74fd2e3969a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86061b69201a18a2247e6742e46218ef8a2176e145bcb9453ba66a9b6bb35dbc"} {"level":"info","ts":"2026-07-14T23:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c1bcf011424fb4a84909d5dd38bae1fec0e8995c2b1eb2b80d6c74fd2e3969a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86061b69201a18a2247e6742e46218ef8a2176e145bcb9453ba66a9b6bb35dbc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:39:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:39:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["86061b69201a18a2247e6742e46218ef8a2176e145bcb9453ba66a9b6bb35dbc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86061b69201a18a2247e6742e46218ef8a2176e145bcb9453ba66a9b6bb35dbc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c1bcf011424fb4a84909d5dd38bae1fec0e8995c2b1eb2b80d6c74fd2e3969a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:39:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:39:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c1bcf011424fb4a84909d5dd38bae1fec0e8995c2b1eb2b80d6c74fd2e3969a"} {"level":"info","ts":"2026-07-14T23:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c1bcf011424fb4a84909d5dd38bae1fec0e8995c2b1eb2b80d6c74fd2e3969a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86061b69201a18a2247e6742e46218ef8a2176e145bcb9453ba66a9b6bb35dbc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:39:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:39:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86061b69201a18a2247e6742e46218ef8a2176e145bcb9453ba66a9b6bb35dbc"} {"level":"info","ts":"2026-07-14T23:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86061b69201a18a2247e6742e46218ef8a2176e145bcb9453ba66a9b6bb35dbc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c1bcf011424fb4a84909d5dd38bae1fec0e8995c2b1eb2b80d6c74fd2e3969a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86061b69201a18a2247e6742e46218ef8a2176e145bcb9453ba66a9b6bb35dbc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:39:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:39:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["86061b69201a18a2247e6742e46218ef8a2176e145bcb9453ba66a9b6bb35dbc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86061b69201a18a2247e6742e46218ef8a2176e145bcb9453ba66a9b6bb35dbc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c1bcf011424fb4a84909d5dd38bae1fec0e8995c2b1eb2b80d6c74fd2e3969a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86061b69201a18a2247e6742e46218ef8a2176e145bcb9453ba66a9b6bb35dbc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:39:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:39:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["86061b69201a18a2247e6742e46218ef8a2176e145bcb9453ba66a9b6bb35dbc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c1bcf011424fb4a84909d5dd38bae1fec0e8995c2b1eb2b80d6c74fd2e3969a"} {"level":"error","ts":"2026-07-14T23:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"86061b69201a18a2247e6742e46218ef8a2176e145bcb9453ba66a9b6bb35dbc","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"86061b69201a18a2247e6742e46218ef8a2176e145bcb9453ba66a9b6bb35dbc\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T23:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86061b69201a18a2247e6742e46218ef8a2176e145bcb9453ba66a9b6bb35dbc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:39:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:39:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86061b69201a18a2247e6742e46218ef8a2176e145bcb9453ba66a9b6bb35dbc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84a8061a2c6443fc7ea2d64a53847a3bedca7314c5c2e2210e344c7afd524640","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:39:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:39:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86061b69201a18a2247e6742e46218ef8a2176e145bcb9453ba66a9b6bb35dbc"} {"level":"info","ts":"2026-07-14T23:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84a8061a2c6443fc7ea2d64a53847a3bedca7314c5c2e2210e344c7afd524640","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c1bcf011424fb4a84909d5dd38bae1fec0e8995c2b1eb2b80d6c74fd2e3969a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:39:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:39:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9c1bcf011424fb4a84909d5dd38bae1fec0e8995c2b1eb2b80d6c74fd2e3969a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c1bcf011424fb4a84909d5dd38bae1fec0e8995c2b1eb2b80d6c74fd2e3969a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86061b69201a18a2247e6742e46218ef8a2176e145bcb9453ba66a9b6bb35dbc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:39:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:39:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["86061b69201a18a2247e6742e46218ef8a2176e145bcb9453ba66a9b6bb35dbc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84a8061a2c6443fc7ea2d64a53847a3bedca7314c5c2e2210e344c7afd524640"} {"level":"info","ts":"2026-07-14T23:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86061b69201a18a2247e6742e46218ef8a2176e145bcb9453ba66a9b6bb35dbc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84a8061a2c6443fc7ea2d64a53847a3bedca7314c5c2e2210e344c7afd524640","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:39:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:39:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["84a8061a2c6443fc7ea2d64a53847a3bedca7314c5c2e2210e344c7afd524640"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86061b69201a18a2247e6742e46218ef8a2176e145bcb9453ba66a9b6bb35dbc"} {"level":"info","ts":"2026-07-14T23:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84a8061a2c6443fc7ea2d64a53847a3bedca7314c5c2e2210e344c7afd524640","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c1bcf011424fb4a84909d5dd38bae1fec0e8995c2b1eb2b80d6c74fd2e3969a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:39:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:39:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c1bcf011424fb4a84909d5dd38bae1fec0e8995c2b1eb2b80d6c74fd2e3969a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86061b69201a18a2247e6742e46218ef8a2176e145bcb9453ba66a9b6bb35dbc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84a8061a2c6443fc7ea2d64a53847a3bedca7314c5c2e2210e344c7afd524640","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c1bcf011424fb4a84909d5dd38bae1fec0e8995c2b1eb2b80d6c74fd2e3969a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c1bcf011424fb4a84909d5dd38bae1fec0e8995c2b1eb2b80d6c74fd2e3969a"} {"level":"debug","ts":"2026-07-14T23:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c1bcf011424fb4a84909d5dd38bae1fec0e8995c2b1eb2b80d6c74fd2e3969a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:39:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:39:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9c1bcf011424fb4a84909d5dd38bae1fec0e8995c2b1eb2b80d6c74fd2e3969a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c1bcf011424fb4a84909d5dd38bae1fec0e8995c2b1eb2b80d6c74fd2e3969a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc7519f5f7b079d620dc92d20fc52057effa09c8a37c814fad040ca7e3c87a73","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:39:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:39:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84a8061a2c6443fc7ea2d64a53847a3bedca7314c5c2e2210e344c7afd524640"} {"level":"info","ts":"2026-07-14T23:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc7519f5f7b079d620dc92d20fc52057effa09c8a37c814fad040ca7e3c87a73","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c1bcf011424fb4a84909d5dd38bae1fec0e8995c2b1eb2b80d6c74fd2e3969a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc7519f5f7b079d620dc92d20fc52057effa09c8a37c814fad040ca7e3c87a73","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc7519f5f7b079d620dc92d20fc52057effa09c8a37c814fad040ca7e3c87a73","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86061b69201a18a2247e6742e46218ef8a2176e145bcb9453ba66a9b6bb35dbc"} {"level":"debug","ts":"2026-07-14T23:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc7519f5f7b079d620dc92d20fc52057effa09c8a37c814fad040ca7e3c87a73","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c1bcf011424fb4a84909d5dd38bae1fec0e8995c2b1eb2b80d6c74fd2e3969a"} {"level":"info","ts":"2026-07-14T23:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc7519f5f7b079d620dc92d20fc52057effa09c8a37c814fad040ca7e3c87a73"} {"level":"debug","ts":"2026-07-14T23:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc7519f5f7b079d620dc92d20fc52057effa09c8a37c814fad040ca7e3c87a73","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:39:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:39:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc7519f5f7b079d620dc92d20fc52057effa09c8a37c814fad040ca7e3c87a73"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc7519f5f7b079d620dc92d20fc52057effa09c8a37c814fad040ca7e3c87a73","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc7519f5f7b079d620dc92d20fc52057effa09c8a37c814fad040ca7e3c87a73","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f6e9b9ff3477c5ce1e29a9bc049f625df3d1e1447b2ea8b1858b6b4005886c24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:39:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:39:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f6e9b9ff3477c5ce1e29a9bc049f625df3d1e1447b2ea8b1858b6b4005886c24","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f6e9b9ff3477c5ce1e29a9bc049f625df3d1e1447b2ea8b1858b6b4005886c24","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc7519f5f7b079d620dc92d20fc52057effa09c8a37c814fad040ca7e3c87a73"} {"level":"debug","ts":"2026-07-14T23:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f6e9b9ff3477c5ce1e29a9bc049f625df3d1e1447b2ea8b1858b6b4005886c24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:39:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:39:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f6e9b9ff3477c5ce1e29a9bc049f625df3d1e1447b2ea8b1858b6b4005886c24","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f6e9b9ff3477c5ce1e29a9bc049f625df3d1e1447b2ea8b1858b6b4005886c24","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6e9b9ff3477c5ce1e29a9bc049f625df3d1e1447b2ea8b1858b6b4005886c24"} {"level":"debug","ts":"2026-07-14T23:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f6e9b9ff3477c5ce1e29a9bc049f625df3d1e1447b2ea8b1858b6b4005886c24","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6e9b9ff3477c5ce1e29a9bc049f625df3d1e1447b2ea8b1858b6b4005886c24"} {"level":"debug","ts":"2026-07-14T23:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f52a7b00d0dc0d9254dd00890d7223c9660ea8c361d851e201137ecbcdbb105","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:39:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:39:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f52a7b00d0dc0d9254dd00890d7223c9660ea8c361d851e201137ecbcdbb105","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f52a7b00d0dc0d9254dd00890d7223c9660ea8c361d851e201137ecbcdbb105","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f52a7b00d0dc0d9254dd00890d7223c9660ea8c361d851e201137ecbcdbb105","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f52a7b00d0dc0d9254dd00890d7223c9660ea8c361d851e201137ecbcdbb105"} {"level":"debug","ts":"2026-07-14T23:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f6e9b9ff3477c5ce1e29a9bc049f625df3d1e1447b2ea8b1858b6b4005886c24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:39:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:39:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f6e9b9ff3477c5ce1e29a9bc049f625df3d1e1447b2ea8b1858b6b4005886c24"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f6e9b9ff3477c5ce1e29a9bc049f625df3d1e1447b2ea8b1858b6b4005886c24","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f52a7b00d0dc0d9254dd00890d7223c9660ea8c361d851e201137ecbcdbb105","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f6e9b9ff3477c5ce1e29a9bc049f625df3d1e1447b2ea8b1858b6b4005886c24","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f52a7b00d0dc0d9254dd00890d7223c9660ea8c361d851e201137ecbcdbb105"} {"level":"debug","ts":"2026-07-14T23:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f52a7b00d0dc0d9254dd00890d7223c9660ea8c361d851e201137ecbcdbb105","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:39:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:39:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4f52a7b00d0dc0d9254dd00890d7223c9660ea8c361d851e201137ecbcdbb105"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f52a7b00d0dc0d9254dd00890d7223c9660ea8c361d851e201137ecbcdbb105","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f52a7b00d0dc0d9254dd00890d7223c9660ea8c361d851e201137ecbcdbb105","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6e9b9ff3477c5ce1e29a9bc049f625df3d1e1447b2ea8b1858b6b4005886c24"} {"level":"debug","ts":"2026-07-14T23:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d0b9b71a53659186b69da85726a62bf5be311803b0ae623efc14df7f153fde6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:39:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:39:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d0b9b71a53659186b69da85726a62bf5be311803b0ae623efc14df7f153fde6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d0b9b71a53659186b69da85726a62bf5be311803b0ae623efc14df7f153fde6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d0b9b71a53659186b69da85726a62bf5be311803b0ae623efc14df7f153fde6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d0b9b71a53659186b69da85726a62bf5be311803b0ae623efc14df7f153fde6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f52a7b00d0dc0d9254dd00890d7223c9660ea8c361d851e201137ecbcdbb105"} {"level":"info","ts":"2026-07-14T23:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d0b9b71a53659186b69da85726a62bf5be311803b0ae623efc14df7f153fde6"} {"level":"debug","ts":"2026-07-14T23:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d0b9b71a53659186b69da85726a62bf5be311803b0ae623efc14df7f153fde6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:39:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:39:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1d0b9b71a53659186b69da85726a62bf5be311803b0ae623efc14df7f153fde6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d0b9b71a53659186b69da85726a62bf5be311803b0ae623efc14df7f153fde6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d0b9b71a53659186b69da85726a62bf5be311803b0ae623efc14df7f153fde6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96159c7d794987a535c7b025d07510e3899c7a9566cafb39e7c508cde87f8ce0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:39:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:39:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96159c7d794987a535c7b025d07510e3899c7a9566cafb39e7c508cde87f8ce0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"96159c7d794987a535c7b025d07510e3899c7a9566cafb39e7c508cde87f8ce0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"96159c7d794987a535c7b025d07510e3899c7a9566cafb39e7c508cde87f8ce0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d0b9b71a53659186b69da85726a62bf5be311803b0ae623efc14df7f153fde6"} {"level":"debug","ts":"2026-07-14T23:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96159c7d794987a535c7b025d07510e3899c7a9566cafb39e7c508cde87f8ce0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:39:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:39:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96159c7d794987a535c7b025d07510e3899c7a9566cafb39e7c508cde87f8ce0"} {"level":"info","ts":"2026-07-14T23:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/505ccf05aa75ed4bc60294011e7859e3b4f9d3d84d37dbc4bec4711ba383cd0c"} {"level":"info","ts":"2026-07-14T23:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/625da130b7844f37c52b6579827e9631158e4f6a772c8560dab930fee000b975"} {"level":"info","ts":"2026-07-14T23:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/054334e45417a2d41d1c6055ddf7eda34a9b868cf4bc38898ee6794861811b77"} {"level":"info","ts":"2026-07-14T23:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1c3aa3c672d57a2d6ce6868eeb858ee0337ad72c0b85b0784357332cc8bbcefa"} {"level":"info","ts":"2026-07-14T23:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4292631a1ab2c940425198a75b28fff7ddafdefa8645d71d6f517474909f1c1d"} {"level":"info","ts":"2026-07-14T23:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96159c7d794987a535c7b025d07510e3899c7a9566cafb39e7c508cde87f8ce0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"96159c7d794987a535c7b025d07510e3899c7a9566cafb39e7c508cde87f8ce0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96159c7d794987a535c7b025d07510e3899c7a9566cafb39e7c508cde87f8ce0"} {"level":"debug","ts":"2026-07-14T23:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96159c7d794987a535c7b025d07510e3899c7a9566cafb39e7c508cde87f8ce0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:39:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:39:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["96159c7d794987a535c7b025d07510e3899c7a9566cafb39e7c508cde87f8ce0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/299899c159ac61e8fe1afb6e48a39a680473c69695b070d91588ceb1d7f2748f"} {"level":"info","ts":"2026-07-14T23:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96159c7d794987a535c7b025d07510e3899c7a9566cafb39e7c508cde87f8ce0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"96159c7d794987a535c7b025d07510e3899c7a9566cafb39e7c508cde87f8ce0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96159c7d794987a535c7b025d07510e3899c7a9566cafb39e7c508cde87f8ce0"} {"level":"info","ts":"2026-07-14T23:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d8b679a1fe3a9e6264decd2dd5f64d76f0cdd5a5ca50229274f02a8508db7d8b"} {"level":"info","ts":"2026-07-14T23:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2a7806c15a244201013467784746c527ef1850119bdeed5da1f35832b06aea56"} {"level":"debug","ts":"2026-07-14T23:40:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b1a11741b5aaa124cdcca750de0a80a8e477b76d50c163f09db5f8c9819bdff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:40:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:40:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:40:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b1a11741b5aaa124cdcca750de0a80a8e477b76d50c163f09db5f8c9819bdff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:40:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b1a11741b5aaa124cdcca750de0a80a8e477b76d50c163f09db5f8c9819bdff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:40:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:40:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:40:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b1a11741b5aaa124cdcca750de0a80a8e477b76d50c163f09db5f8c9819bdff"} {"level":"info","ts":"2026-07-14T23:40:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b1a11741b5aaa124cdcca750de0a80a8e477b76d50c163f09db5f8c9819bdff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:40:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b1a11741b5aaa124cdcca750de0a80a8e477b76d50c163f09db5f8c9819bdff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:40:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:40:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-14T23:40:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3b1a11741b5aaa124cdcca750de0a80a8e477b76d50c163f09db5f8c9819bdff","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3b1a11741b5aaa124cdcca750de0a80a8e477b76d50c163f09db5f8c9819bdff\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T23:40:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b1a11741b5aaa124cdcca750de0a80a8e477b76d50c163f09db5f8c9819bdff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:40:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b1a11741b5aaa124cdcca750de0a80a8e477b76d50c163f09db5f8c9819bdff","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:40:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b1a11741b5aaa124cdcca750de0a80a8e477b76d50c163f09db5f8c9819bdff"} {"level":"info","ts":"2026-07-14T23:40:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b1a11741b5aaa124cdcca750de0a80a8e477b76d50c163f09db5f8c9819bdff"} {"level":"debug","ts":"2026-07-14T23:40:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b1a11741b5aaa124cdcca750de0a80a8e477b76d50c163f09db5f8c9819bdff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:40:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:40:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3b1a11741b5aaa124cdcca750de0a80a8e477b76d50c163f09db5f8c9819bdff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:40:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b1a11741b5aaa124cdcca750de0a80a8e477b76d50c163f09db5f8c9819bdff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:40:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b1a11741b5aaa124cdcca750de0a80a8e477b76d50c163f09db5f8c9819bdff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:40:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:40:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:40:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b1a11741b5aaa124cdcca750de0a80a8e477b76d50c163f09db5f8c9819bdff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:40:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b1a11741b5aaa124cdcca750de0a80a8e477b76d50c163f09db5f8c9819bdff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:40:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b1a11741b5aaa124cdcca750de0a80a8e477b76d50c163f09db5f8c9819bdff","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:40:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b1a11741b5aaa124cdcca750de0a80a8e477b76d50c163f09db5f8c9819bdff"} {"level":"debug","ts":"2026-07-14T23:40:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b1a11741b5aaa124cdcca750de0a80a8e477b76d50c163f09db5f8c9819bdff","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:40:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b1a11741b5aaa124cdcca750de0a80a8e477b76d50c163f09db5f8c9819bdff"} {"level":"debug","ts":"2026-07-14T23:40:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b1a11741b5aaa124cdcca750de0a80a8e477b76d50c163f09db5f8c9819bdff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:40:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:40:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3b1a11741b5aaa124cdcca750de0a80a8e477b76d50c163f09db5f8c9819bdff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:40:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b1a11741b5aaa124cdcca750de0a80a8e477b76d50c163f09db5f8c9819bdff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:40:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b1a11741b5aaa124cdcca750de0a80a8e477b76d50c163f09db5f8c9819bdff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:40:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:40:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:40:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b1a11741b5aaa124cdcca750de0a80a8e477b76d50c163f09db5f8c9819bdff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:40:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b1a11741b5aaa124cdcca750de0a80a8e477b76d50c163f09db5f8c9819bdff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:40:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b1a11741b5aaa124cdcca750de0a80a8e477b76d50c163f09db5f8c9819bdff","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:40:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b1a11741b5aaa124cdcca750de0a80a8e477b76d50c163f09db5f8c9819bdff"} {"level":"debug","ts":"2026-07-14T23:40:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b1a11741b5aaa124cdcca750de0a80a8e477b76d50c163f09db5f8c9819bdff","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:40:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b1a11741b5aaa124cdcca750de0a80a8e477b76d50c163f09db5f8c9819bdff"} {"level":"debug","ts":"2026-07-14T23:40:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b1a11741b5aaa124cdcca750de0a80a8e477b76d50c163f09db5f8c9819bdff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:40:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:40:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3b1a11741b5aaa124cdcca750de0a80a8e477b76d50c163f09db5f8c9819bdff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:40:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b1a11741b5aaa124cdcca750de0a80a8e477b76d50c163f09db5f8c9819bdff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:40:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b1a11741b5aaa124cdcca750de0a80a8e477b76d50c163f09db5f8c9819bdff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:40:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:40:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:40:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b1a11741b5aaa124cdcca750de0a80a8e477b76d50c163f09db5f8c9819bdff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:40:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b1a11741b5aaa124cdcca750de0a80a8e477b76d50c163f09db5f8c9819bdff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:40:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b1a11741b5aaa124cdcca750de0a80a8e477b76d50c163f09db5f8c9819bdff","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:40:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b1a11741b5aaa124cdcca750de0a80a8e477b76d50c163f09db5f8c9819bdff"} {"level":"debug","ts":"2026-07-14T23:40:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b1a11741b5aaa124cdcca750de0a80a8e477b76d50c163f09db5f8c9819bdff","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:40:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b1a11741b5aaa124cdcca750de0a80a8e477b76d50c163f09db5f8c9819bdff"} {"level":"debug","ts":"2026-07-14T23:40:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98556c9c17fd42ee348bf970834bf494edb3eb7ba665ec002503bf5e32ee7ab8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:40:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:40:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:40:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98556c9c17fd42ee348bf970834bf494edb3eb7ba665ec002503bf5e32ee7ab8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:40:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b1a11741b5aaa124cdcca750de0a80a8e477b76d50c163f09db5f8c9819bdff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:40:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:40:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3b1a11741b5aaa124cdcca750de0a80a8e477b76d50c163f09db5f8c9819bdff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:40:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98556c9c17fd42ee348bf970834bf494edb3eb7ba665ec002503bf5e32ee7ab8"} {"level":"info","ts":"2026-07-14T23:40:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b1a11741b5aaa124cdcca750de0a80a8e477b76d50c163f09db5f8c9819bdff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:40:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98556c9c17fd42ee348bf970834bf494edb3eb7ba665ec002503bf5e32ee7ab8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:40:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b1a11741b5aaa124cdcca750de0a80a8e477b76d50c163f09db5f8c9819bdff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:40:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98556c9c17fd42ee348bf970834bf494edb3eb7ba665ec002503bf5e32ee7ab8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:40:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98556c9c17fd42ee348bf970834bf494edb3eb7ba665ec002503bf5e32ee7ab8"} {"level":"debug","ts":"2026-07-14T23:40:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98556c9c17fd42ee348bf970834bf494edb3eb7ba665ec002503bf5e32ee7ab8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:40:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:40:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["98556c9c17fd42ee348bf970834bf494edb3eb7ba665ec002503bf5e32ee7ab8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:40:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b1a11741b5aaa124cdcca750de0a80a8e477b76d50c163f09db5f8c9819bdff"} {"level":"info","ts":"2026-07-14T23:40:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98556c9c17fd42ee348bf970834bf494edb3eb7ba665ec002503bf5e32ee7ab8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:40:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98556c9c17fd42ee348bf970834bf494edb3eb7ba665ec002503bf5e32ee7ab8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:40:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:40:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:40:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98556c9c17fd42ee348bf970834bf494edb3eb7ba665ec002503bf5e32ee7ab8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:40:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98556c9c17fd42ee348bf970834bf494edb3eb7ba665ec002503bf5e32ee7ab8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:40:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98556c9c17fd42ee348bf970834bf494edb3eb7ba665ec002503bf5e32ee7ab8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:40:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98556c9c17fd42ee348bf970834bf494edb3eb7ba665ec002503bf5e32ee7ab8"} {"level":"debug","ts":"2026-07-14T23:40:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e512e96efb6785545a172b0917a291e8420cd9e8f9876760d20d3e12cd9134d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:40:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:40:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:40:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98556c9c17fd42ee348bf970834bf494edb3eb7ba665ec002503bf5e32ee7ab8"} {"level":"info","ts":"2026-07-14T23:40:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e512e96efb6785545a172b0917a291e8420cd9e8f9876760d20d3e12cd9134d6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:40:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98556c9c17fd42ee348bf970834bf494edb3eb7ba665ec002503bf5e32ee7ab8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:40:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:40:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["98556c9c17fd42ee348bf970834bf494edb3eb7ba665ec002503bf5e32ee7ab8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:40:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98556c9c17fd42ee348bf970834bf494edb3eb7ba665ec002503bf5e32ee7ab8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:40:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e512e96efb6785545a172b0917a291e8420cd9e8f9876760d20d3e12cd9134d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:40:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:40:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:40:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e512e96efb6785545a172b0917a291e8420cd9e8f9876760d20d3e12cd9134d6"} {"level":"info","ts":"2026-07-14T23:40:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e512e96efb6785545a172b0917a291e8420cd9e8f9876760d20d3e12cd9134d6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:40:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98556c9c17fd42ee348bf970834bf494edb3eb7ba665ec002503bf5e32ee7ab8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:40:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e512e96efb6785545a172b0917a291e8420cd9e8f9876760d20d3e12cd9134d6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:40:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e512e96efb6785545a172b0917a291e8420cd9e8f9876760d20d3e12cd9134d6"} {"level":"debug","ts":"2026-07-14T23:40:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e512e96efb6785545a172b0917a291e8420cd9e8f9876760d20d3e12cd9134d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:40:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:40:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e512e96efb6785545a172b0917a291e8420cd9e8f9876760d20d3e12cd9134d6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:40:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e512e96efb6785545a172b0917a291e8420cd9e8f9876760d20d3e12cd9134d6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:40:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e512e96efb6785545a172b0917a291e8420cd9e8f9876760d20d3e12cd9134d6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:40:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98556c9c17fd42ee348bf970834bf494edb3eb7ba665ec002503bf5e32ee7ab8"} {"level":"info","ts":"2026-07-14T23:40:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e512e96efb6785545a172b0917a291e8420cd9e8f9876760d20d3e12cd9134d6"} {"level":"debug","ts":"2026-07-14T23:40:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c44fe003a5e73188d79919e5f7dc5e07d565d80818c4d204d2a749440f336b03","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:40:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:40:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:40:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c44fe003a5e73188d79919e5f7dc5e07d565d80818c4d204d2a749440f336b03","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:40:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c44fe003a5e73188d79919e5f7dc5e07d565d80818c4d204d2a749440f336b03","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:40:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c44fe003a5e73188d79919e5f7dc5e07d565d80818c4d204d2a749440f336b03","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:40:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c44fe003a5e73188d79919e5f7dc5e07d565d80818c4d204d2a749440f336b03"} {"level":"debug","ts":"2026-07-14T23:40:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c44fe003a5e73188d79919e5f7dc5e07d565d80818c4d204d2a749440f336b03","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:40:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c44fe003a5e73188d79919e5f7dc5e07d565d80818c4d204d2a749440f336b03"} {"level":"debug","ts":"2026-07-14T23:40:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c44fe003a5e73188d79919e5f7dc5e07d565d80818c4d204d2a749440f336b03","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:40:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:40:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c44fe003a5e73188d79919e5f7dc5e07d565d80818c4d204d2a749440f336b03"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:40:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c44fe003a5e73188d79919e5f7dc5e07d565d80818c4d204d2a749440f336b03","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:40:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c44fe003a5e73188d79919e5f7dc5e07d565d80818c4d204d2a749440f336b03","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:40:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c44fe003a5e73188d79919e5f7dc5e07d565d80818c4d204d2a749440f336b03"} {"level":"debug","ts":"2026-07-14T23:40:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da92b24bd5b04f9d47b8e8ecd160b0959518b3ae455d09d3d796bef59185feba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:40:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:40:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:40:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da92b24bd5b04f9d47b8e8ecd160b0959518b3ae455d09d3d796bef59185feba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:40:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da92b24bd5b04f9d47b8e8ecd160b0959518b3ae455d09d3d796bef59185feba","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:40:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da92b24bd5b04f9d47b8e8ecd160b0959518b3ae455d09d3d796bef59185feba"} {"level":"debug","ts":"2026-07-14T23:40:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da92b24bd5b04f9d47b8e8ecd160b0959518b3ae455d09d3d796bef59185feba","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:40:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da92b24bd5b04f9d47b8e8ecd160b0959518b3ae455d09d3d796bef59185feba"} {"level":"debug","ts":"2026-07-14T23:40:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da92b24bd5b04f9d47b8e8ecd160b0959518b3ae455d09d3d796bef59185feba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:40:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:40:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da92b24bd5b04f9d47b8e8ecd160b0959518b3ae455d09d3d796bef59185feba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:40:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da92b24bd5b04f9d47b8e8ecd160b0959518b3ae455d09d3d796bef59185feba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:40:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da92b24bd5b04f9d47b8e8ecd160b0959518b3ae455d09d3d796bef59185feba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:40:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:40:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:40:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da92b24bd5b04f9d47b8e8ecd160b0959518b3ae455d09d3d796bef59185feba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:40:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da92b24bd5b04f9d47b8e8ecd160b0959518b3ae455d09d3d796bef59185feba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:40:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da92b24bd5b04f9d47b8e8ecd160b0959518b3ae455d09d3d796bef59185feba","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:40:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da92b24bd5b04f9d47b8e8ecd160b0959518b3ae455d09d3d796bef59185feba"} {"level":"debug","ts":"2026-07-14T23:40:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da92b24bd5b04f9d47b8e8ecd160b0959518b3ae455d09d3d796bef59185feba","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:40:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da92b24bd5b04f9d47b8e8ecd160b0959518b3ae455d09d3d796bef59185feba"} {"level":"debug","ts":"2026-07-14T23:40:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a01fd812ab34b6ab5303ba04a5e07228ecd730774a4b62429c2056af3ed1fb01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:40:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:40:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:40:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a01fd812ab34b6ab5303ba04a5e07228ecd730774a4b62429c2056af3ed1fb01","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:40:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a01fd812ab34b6ab5303ba04a5e07228ecd730774a4b62429c2056af3ed1fb01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:40:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:40:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:40:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a01fd812ab34b6ab5303ba04a5e07228ecd730774a4b62429c2056af3ed1fb01"} {"level":"info","ts":"2026-07-14T23:40:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a01fd812ab34b6ab5303ba04a5e07228ecd730774a4b62429c2056af3ed1fb01","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:40:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a01fd812ab34b6ab5303ba04a5e07228ecd730774a4b62429c2056af3ed1fb01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:40:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:40:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-14T23:40:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a01fd812ab34b6ab5303ba04a5e07228ecd730774a4b62429c2056af3ed1fb01","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a01fd812ab34b6ab5303ba04a5e07228ecd730774a4b62429c2056af3ed1fb01\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T23:40:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da92b24bd5b04f9d47b8e8ecd160b0959518b3ae455d09d3d796bef59185feba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:40:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:40:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da92b24bd5b04f9d47b8e8ecd160b0959518b3ae455d09d3d796bef59185feba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:40:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a01fd812ab34b6ab5303ba04a5e07228ecd730774a4b62429c2056af3ed1fb01"} {"level":"info","ts":"2026-07-14T23:40:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da92b24bd5b04f9d47b8e8ecd160b0959518b3ae455d09d3d796bef59185feba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:40:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a01fd812ab34b6ab5303ba04a5e07228ecd730774a4b62429c2056af3ed1fb01","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:40:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da92b24bd5b04f9d47b8e8ecd160b0959518b3ae455d09d3d796bef59185feba","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:40:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a01fd812ab34b6ab5303ba04a5e07228ecd730774a4b62429c2056af3ed1fb01"} {"level":"info","ts":"2026-07-14T23:40:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da92b24bd5b04f9d47b8e8ecd160b0959518b3ae455d09d3d796bef59185feba"} {"level":"debug","ts":"2026-07-14T23:40:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a01fd812ab34b6ab5303ba04a5e07228ecd730774a4b62429c2056af3ed1fb01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:40:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:40:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a01fd812ab34b6ab5303ba04a5e07228ecd730774a4b62429c2056af3ed1fb01"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:40:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a01fd812ab34b6ab5303ba04a5e07228ecd730774a4b62429c2056af3ed1fb01","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:40:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f4221cdffa905b1b64bc6cdf1a1ae7ad3c15cdf480f9957125884ef81611468","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:40:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:40:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:40:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f4221cdffa905b1b64bc6cdf1a1ae7ad3c15cdf480f9957125884ef81611468"} {"level":"info","ts":"2026-07-14T23:40:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f4221cdffa905b1b64bc6cdf1a1ae7ad3c15cdf480f9957125884ef81611468","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:40:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a01fd812ab34b6ab5303ba04a5e07228ecd730774a4b62429c2056af3ed1fb01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:40:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:40:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:40:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a01fd812ab34b6ab5303ba04a5e07228ecd730774a4b62429c2056af3ed1fb01","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:40:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f4221cdffa905b1b64bc6cdf1a1ae7ad3c15cdf480f9957125884ef81611468","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:40:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:40:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f4221cdffa905b1b64bc6cdf1a1ae7ad3c15cdf480f9957125884ef81611468"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:40:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a01fd812ab34b6ab5303ba04a5e07228ecd730774a4b62429c2056af3ed1fb01"} {"level":"info","ts":"2026-07-14T23:40:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f4221cdffa905b1b64bc6cdf1a1ae7ad3c15cdf480f9957125884ef81611468","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:40:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a01fd812ab34b6ab5303ba04a5e07228ecd730774a4b62429c2056af3ed1fb01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:40:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:40:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a01fd812ab34b6ab5303ba04a5e07228ecd730774a4b62429c2056af3ed1fb01"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:40:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a01fd812ab34b6ab5303ba04a5e07228ecd730774a4b62429c2056af3ed1fb01","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:40:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f4221cdffa905b1b64bc6cdf1a1ae7ad3c15cdf480f9957125884ef81611468","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:40:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:40:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:40:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f4221cdffa905b1b64bc6cdf1a1ae7ad3c15cdf480f9957125884ef81611468"} {"level":"info","ts":"2026-07-14T23:40:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f4221cdffa905b1b64bc6cdf1a1ae7ad3c15cdf480f9957125884ef81611468","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:40:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a01fd812ab34b6ab5303ba04a5e07228ecd730774a4b62429c2056af3ed1fb01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:40:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:40:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:40:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a01fd812ab34b6ab5303ba04a5e07228ecd730774a4b62429c2056af3ed1fb01"} {"level":"info","ts":"2026-07-14T23:40:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a01fd812ab34b6ab5303ba04a5e07228ecd730774a4b62429c2056af3ed1fb01","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:40:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f4221cdffa905b1b64bc6cdf1a1ae7ad3c15cdf480f9957125884ef81611468","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:40:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a01fd812ab34b6ab5303ba04a5e07228ecd730774a4b62429c2056af3ed1fb01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:40:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:40:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a01fd812ab34b6ab5303ba04a5e07228ecd730774a4b62429c2056af3ed1fb01"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:40:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f4221cdffa905b1b64bc6cdf1a1ae7ad3c15cdf480f9957125884ef81611468"} {"level":"info","ts":"2026-07-14T23:40:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a01fd812ab34b6ab5303ba04a5e07228ecd730774a4b62429c2056af3ed1fb01","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:40:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f4221cdffa905b1b64bc6cdf1a1ae7ad3c15cdf480f9957125884ef81611468","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:40:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:40:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f4221cdffa905b1b64bc6cdf1a1ae7ad3c15cdf480f9957125884ef81611468"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:40:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a01fd812ab34b6ab5303ba04a5e07228ecd730774a4b62429c2056af3ed1fb01"} {"level":"info","ts":"2026-07-14T23:40:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f4221cdffa905b1b64bc6cdf1a1ae7ad3c15cdf480f9957125884ef81611468","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:40:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a01fd812ab34b6ab5303ba04a5e07228ecd730774a4b62429c2056af3ed1fb01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:40:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:40:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:40:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a01fd812ab34b6ab5303ba04a5e07228ecd730774a4b62429c2056af3ed1fb01","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:40:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f4221cdffa905b1b64bc6cdf1a1ae7ad3c15cdf480f9957125884ef81611468","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:40:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a01fd812ab34b6ab5303ba04a5e07228ecd730774a4b62429c2056af3ed1fb01","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:40:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a01fd812ab34b6ab5303ba04a5e07228ecd730774a4b62429c2056af3ed1fb01","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:40:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a01fd812ab34b6ab5303ba04a5e07228ecd730774a4b62429c2056af3ed1fb01"} {"level":"debug","ts":"2026-07-14T23:40:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a01fd812ab34b6ab5303ba04a5e07228ecd730774a4b62429c2056af3ed1fb01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:40:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:40:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a01fd812ab34b6ab5303ba04a5e07228ecd730774a4b62429c2056af3ed1fb01"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:40:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f4221cdffa905b1b64bc6cdf1a1ae7ad3c15cdf480f9957125884ef81611468"} {"level":"info","ts":"2026-07-14T23:40:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a01fd812ab34b6ab5303ba04a5e07228ecd730774a4b62429c2056af3ed1fb01","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:40:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a01fd812ab34b6ab5303ba04a5e07228ecd730774a4b62429c2056af3ed1fb01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:40:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:40:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:40:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a01fd812ab34b6ab5303ba04a5e07228ecd730774a4b62429c2056af3ed1fb01","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:40:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"725d9af554734c77afb987221d743afcebdfef4b66c6b18d9eec74bcf4a9a5ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:40:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:40:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:40:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a01fd812ab34b6ab5303ba04a5e07228ecd730774a4b62429c2056af3ed1fb01"} {"level":"info","ts":"2026-07-14T23:40:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"725d9af554734c77afb987221d743afcebdfef4b66c6b18d9eec74bcf4a9a5ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:40:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a01fd812ab34b6ab5303ba04a5e07228ecd730774a4b62429c2056af3ed1fb01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:40:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:40:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a01fd812ab34b6ab5303ba04a5e07228ecd730774a4b62429c2056af3ed1fb01"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:40:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a01fd812ab34b6ab5303ba04a5e07228ecd730774a4b62429c2056af3ed1fb01","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:40:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"725d9af554734c77afb987221d743afcebdfef4b66c6b18d9eec74bcf4a9a5ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:40:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:40:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:40:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"725d9af554734c77afb987221d743afcebdfef4b66c6b18d9eec74bcf4a9a5ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:40:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a01fd812ab34b6ab5303ba04a5e07228ecd730774a4b62429c2056af3ed1fb01","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:40:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"725d9af554734c77afb987221d743afcebdfef4b66c6b18d9eec74bcf4a9a5ab","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:40:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/725d9af554734c77afb987221d743afcebdfef4b66c6b18d9eec74bcf4a9a5ab"} {"level":"debug","ts":"2026-07-14T23:40:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"725d9af554734c77afb987221d743afcebdfef4b66c6b18d9eec74bcf4a9a5ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:40:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:40:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["725d9af554734c77afb987221d743afcebdfef4b66c6b18d9eec74bcf4a9a5ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"725d9af554734c77afb987221d743afcebdfef4b66c6b18d9eec74bcf4a9a5ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"725d9af554734c77afb987221d743afcebdfef4b66c6b18d9eec74bcf4a9a5ab","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a01fd812ab34b6ab5303ba04a5e07228ecd730774a4b62429c2056af3ed1fb01"} {"level":"info","ts":"2026-07-14T23:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/725d9af554734c77afb987221d743afcebdfef4b66c6b18d9eec74bcf4a9a5ab"} {"level":"debug","ts":"2026-07-14T23:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86061b69201a18a2247e6742e46218ef8a2176e145bcb9453ba66a9b6bb35dbc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:40:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:40:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86061b69201a18a2247e6742e46218ef8a2176e145bcb9453ba66a9b6bb35dbc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86061b69201a18a2247e6742e46218ef8a2176e145bcb9453ba66a9b6bb35dbc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86061b69201a18a2247e6742e46218ef8a2176e145bcb9453ba66a9b6bb35dbc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86061b69201a18a2247e6742e46218ef8a2176e145bcb9453ba66a9b6bb35dbc"} {"level":"debug","ts":"2026-07-14T23:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86061b69201a18a2247e6742e46218ef8a2176e145bcb9453ba66a9b6bb35dbc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86061b69201a18a2247e6742e46218ef8a2176e145bcb9453ba66a9b6bb35dbc"} {"level":"debug","ts":"2026-07-14T23:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86061b69201a18a2247e6742e46218ef8a2176e145bcb9453ba66a9b6bb35dbc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:40:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:40:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["86061b69201a18a2247e6742e46218ef8a2176e145bcb9453ba66a9b6bb35dbc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86061b69201a18a2247e6742e46218ef8a2176e145bcb9453ba66a9b6bb35dbc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86061b69201a18a2247e6742e46218ef8a2176e145bcb9453ba66a9b6bb35dbc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:40:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:40:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86061b69201a18a2247e6742e46218ef8a2176e145bcb9453ba66a9b6bb35dbc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1573b87ef683f20144eeabe3dafa59d6ea5ad4e8e826790e689a5ab916693a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86061b69201a18a2247e6742e46218ef8a2176e145bcb9453ba66a9b6bb35dbc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86061b69201a18a2247e6742e46218ef8a2176e145bcb9453ba66a9b6bb35dbc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86061b69201a18a2247e6742e46218ef8a2176e145bcb9453ba66a9b6bb35dbc"} {"level":"debug","ts":"2026-07-14T23:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86061b69201a18a2247e6742e46218ef8a2176e145bcb9453ba66a9b6bb35dbc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:40:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:40:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["86061b69201a18a2247e6742e46218ef8a2176e145bcb9453ba66a9b6bb35dbc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1573b87ef683f20144eeabe3dafa59d6ea5ad4e8e826790e689a5ab916693a7"} {"level":"info","ts":"2026-07-14T23:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86061b69201a18a2247e6742e46218ef8a2176e145bcb9453ba66a9b6bb35dbc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86061b69201a18a2247e6742e46218ef8a2176e145bcb9453ba66a9b6bb35dbc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:40:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:40:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86061b69201a18a2247e6742e46218ef8a2176e145bcb9453ba66a9b6bb35dbc"} {"level":"info","ts":"2026-07-14T23:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86061b69201a18a2247e6742e46218ef8a2176e145bcb9453ba66a9b6bb35dbc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86061b69201a18a2247e6742e46218ef8a2176e145bcb9453ba66a9b6bb35dbc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86061b69201a18a2247e6742e46218ef8a2176e145bcb9453ba66a9b6bb35dbc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86061b69201a18a2247e6742e46218ef8a2176e145bcb9453ba66a9b6bb35dbc"} {"level":"debug","ts":"2026-07-14T23:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86061b69201a18a2247e6742e46218ef8a2176e145bcb9453ba66a9b6bb35dbc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f4221cdffa905b1b64bc6cdf1a1ae7ad3c15cdf480f9957125884ef81611468","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86061b69201a18a2247e6742e46218ef8a2176e145bcb9453ba66a9b6bb35dbc"} {"level":"debug","ts":"2026-07-14T23:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e512e96efb6785545a172b0917a291e8420cd9e8f9876760d20d3e12cd9134d6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f4221cdffa905b1b64bc6cdf1a1ae7ad3c15cdf480f9957125884ef81611468"} {"level":"debug","ts":"2026-07-14T23:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86061b69201a18a2247e6742e46218ef8a2176e145bcb9453ba66a9b6bb35dbc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:40:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:40:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["86061b69201a18a2247e6742e46218ef8a2176e145bcb9453ba66a9b6bb35dbc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86061b69201a18a2247e6742e46218ef8a2176e145bcb9453ba66a9b6bb35dbc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86061b69201a18a2247e6742e46218ef8a2176e145bcb9453ba66a9b6bb35dbc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e512e96efb6785545a172b0917a291e8420cd9e8f9876760d20d3e12cd9134d6"} {"level":"info","ts":"2026-07-14T23:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86061b69201a18a2247e6742e46218ef8a2176e145bcb9453ba66a9b6bb35dbc"} {"level":"debug","ts":"2026-07-14T23:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a01fd812ab34b6ab5303ba04a5e07228ecd730774a4b62429c2056af3ed1fb01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:40:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:40:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a01fd812ab34b6ab5303ba04a5e07228ecd730774a4b62429c2056af3ed1fb01"} {"level":"info","ts":"2026-07-14T23:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a01fd812ab34b6ab5303ba04a5e07228ecd730774a4b62429c2056af3ed1fb01","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a01fd812ab34b6ab5303ba04a5e07228ecd730774a4b62429c2056af3ed1fb01","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a01fd812ab34b6ab5303ba04a5e07228ecd730774a4b62429c2056af3ed1fb01","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a01fd812ab34b6ab5303ba04a5e07228ecd730774a4b62429c2056af3ed1fb01"} {"level":"debug","ts":"2026-07-14T23:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a01fd812ab34b6ab5303ba04a5e07228ecd730774a4b62429c2056af3ed1fb01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:40:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:40:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a01fd812ab34b6ab5303ba04a5e07228ecd730774a4b62429c2056af3ed1fb01"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a01fd812ab34b6ab5303ba04a5e07228ecd730774a4b62429c2056af3ed1fb01","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a01fd812ab34b6ab5303ba04a5e07228ecd730774a4b62429c2056af3ed1fb01","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a01fd812ab34b6ab5303ba04a5e07228ecd730774a4b62429c2056af3ed1fb01"} {"level":"debug","ts":"2026-07-14T23:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c44fe003a5e73188d79919e5f7dc5e07d565d80818c4d204d2a749440f336b03","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:40:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:40:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c44fe003a5e73188d79919e5f7dc5e07d565d80818c4d204d2a749440f336b03","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c44fe003a5e73188d79919e5f7dc5e07d565d80818c4d204d2a749440f336b03","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f52a7b00d0dc0d9254dd00890d7223c9660ea8c361d851e201137ecbcdbb105","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c44fe003a5e73188d79919e5f7dc5e07d565d80818c4d204d2a749440f336b03","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c44fe003a5e73188d79919e5f7dc5e07d565d80818c4d204d2a749440f336b03"} {"level":"debug","ts":"2026-07-14T23:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c44fe003a5e73188d79919e5f7dc5e07d565d80818c4d204d2a749440f336b03","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:40:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:40:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c44fe003a5e73188d79919e5f7dc5e07d565d80818c4d204d2a749440f336b03"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f52a7b00d0dc0d9254dd00890d7223c9660ea8c361d851e201137ecbcdbb105"} {"level":"info","ts":"2026-07-14T23:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c44fe003a5e73188d79919e5f7dc5e07d565d80818c4d204d2a749440f336b03","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c44fe003a5e73188d79919e5f7dc5e07d565d80818c4d204d2a749440f336b03","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:40:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:40:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c44fe003a5e73188d79919e5f7dc5e07d565d80818c4d204d2a749440f336b03"} {"level":"info","ts":"2026-07-14T23:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c44fe003a5e73188d79919e5f7dc5e07d565d80818c4d204d2a749440f336b03","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c44fe003a5e73188d79919e5f7dc5e07d565d80818c4d204d2a749440f336b03","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c44fe003a5e73188d79919e5f7dc5e07d565d80818c4d204d2a749440f336b03","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c44fe003a5e73188d79919e5f7dc5e07d565d80818c4d204d2a749440f336b03"} {"level":"debug","ts":"2026-07-14T23:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c44fe003a5e73188d79919e5f7dc5e07d565d80818c4d204d2a749440f336b03","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c44fe003a5e73188d79919e5f7dc5e07d565d80818c4d204d2a749440f336b03"} {"level":"debug","ts":"2026-07-14T23:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c44fe003a5e73188d79919e5f7dc5e07d565d80818c4d204d2a749440f336b03","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:40:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:40:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c44fe003a5e73188d79919e5f7dc5e07d565d80818c4d204d2a749440f336b03"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c44fe003a5e73188d79919e5f7dc5e07d565d80818c4d204d2a749440f336b03","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c44fe003a5e73188d79919e5f7dc5e07d565d80818c4d204d2a749440f336b03","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:40:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:40:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c44fe003a5e73188d79919e5f7dc5e07d565d80818c4d204d2a749440f336b03"} {"level":"info","ts":"2026-07-14T23:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c44fe003a5e73188d79919e5f7dc5e07d565d80818c4d204d2a749440f336b03","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c44fe003a5e73188d79919e5f7dc5e07d565d80818c4d204d2a749440f336b03","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c44fe003a5e73188d79919e5f7dc5e07d565d80818c4d204d2a749440f336b03","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c44fe003a5e73188d79919e5f7dc5e07d565d80818c4d204d2a749440f336b03"} {"level":"debug","ts":"2026-07-14T23:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c1bcf011424fb4a84909d5dd38bae1fec0e8995c2b1eb2b80d6c74fd2e3969a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c44fe003a5e73188d79919e5f7dc5e07d565d80818c4d204d2a749440f336b03","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:40:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:40:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c44fe003a5e73188d79919e5f7dc5e07d565d80818c4d204d2a749440f336b03"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c44fe003a5e73188d79919e5f7dc5e07d565d80818c4d204d2a749440f336b03","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c44fe003a5e73188d79919e5f7dc5e07d565d80818c4d204d2a749440f336b03","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c1bcf011424fb4a84909d5dd38bae1fec0e8995c2b1eb2b80d6c74fd2e3969a"} {"level":"info","ts":"2026-07-14T23:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c44fe003a5e73188d79919e5f7dc5e07d565d80818c4d204d2a749440f336b03"} {"level":"debug","ts":"2026-07-14T23:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20074b64f0086a356b1519bbbfe7ebb80bb8ee9794ba55311d3c98dcf9498314","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:40:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:40:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20074b64f0086a356b1519bbbfe7ebb80bb8ee9794ba55311d3c98dcf9498314","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"20074b64f0086a356b1519bbbfe7ebb80bb8ee9794ba55311d3c98dcf9498314","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"20074b64f0086a356b1519bbbfe7ebb80bb8ee9794ba55311d3c98dcf9498314","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20074b64f0086a356b1519bbbfe7ebb80bb8ee9794ba55311d3c98dcf9498314"} {"level":"debug","ts":"2026-07-14T23:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"20074b64f0086a356b1519bbbfe7ebb80bb8ee9794ba55311d3c98dcf9498314","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20074b64f0086a356b1519bbbfe7ebb80bb8ee9794ba55311d3c98dcf9498314"} {"level":"debug","ts":"2026-07-14T23:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20074b64f0086a356b1519bbbfe7ebb80bb8ee9794ba55311d3c98dcf9498314","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:40:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:40:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["20074b64f0086a356b1519bbbfe7ebb80bb8ee9794ba55311d3c98dcf9498314"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20074b64f0086a356b1519bbbfe7ebb80bb8ee9794ba55311d3c98dcf9498314","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"20074b64f0086a356b1519bbbfe7ebb80bb8ee9794ba55311d3c98dcf9498314","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84a8061a2c6443fc7ea2d64a53847a3bedca7314c5c2e2210e344c7afd524640","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20074b64f0086a356b1519bbbfe7ebb80bb8ee9794ba55311d3c98dcf9498314"} {"level":"info","ts":"2026-07-14T23:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84a8061a2c6443fc7ea2d64a53847a3bedca7314c5c2e2210e344c7afd524640"} {"level":"debug","ts":"2026-07-14T23:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b1a11741b5aaa124cdcca750de0a80a8e477b76d50c163f09db5f8c9819bdff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:40:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:40:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b1a11741b5aaa124cdcca750de0a80a8e477b76d50c163f09db5f8c9819bdff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b1a11741b5aaa124cdcca750de0a80a8e477b76d50c163f09db5f8c9819bdff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cae086f2dfc373e5aad98209a1a1cc4a7a4fd8bab9b2c0e3f0785b8028ec7c58","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b1a11741b5aaa124cdcca750de0a80a8e477b76d50c163f09db5f8c9819bdff","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b1a11741b5aaa124cdcca750de0a80a8e477b76d50c163f09db5f8c9819bdff"} {"level":"debug","ts":"2026-07-14T23:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b1a11741b5aaa124cdcca750de0a80a8e477b76d50c163f09db5f8c9819bdff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:40:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:40:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3b1a11741b5aaa124cdcca750de0a80a8e477b76d50c163f09db5f8c9819bdff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cae086f2dfc373e5aad98209a1a1cc4a7a4fd8bab9b2c0e3f0785b8028ec7c58"} {"level":"info","ts":"2026-07-14T23:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b1a11741b5aaa124cdcca750de0a80a8e477b76d50c163f09db5f8c9819bdff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b1a11741b5aaa124cdcca750de0a80a8e477b76d50c163f09db5f8c9819bdff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T23:40:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T23:40:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b1a11741b5aaa124cdcca750de0a80a8e477b76d50c163f09db5f8c9819bdff","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b1a11741b5aaa124cdcca750de0a80a8e477b76d50c163f09db5f8c9819bdff"} {"level":"debug","ts":"2026-07-14T23:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b1a11741b5aaa124cdcca750de0a80a8e477b76d50c163f09db5f8c9819bdff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b1a11741b5aaa124cdcca750de0a80a8e477b76d50c163f09db5f8c9819bdff","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b1a11741b5aaa124cdcca750de0a80a8e477b76d50c163f09db5f8c9819bdff"} {"level":"debug","ts":"2026-07-14T23:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b1a11741b5aaa124cdcca750de0a80a8e477b76d50c163f09db5f8c9819bdff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d0b9b71a53659186b69da85726a62bf5be311803b0ae623efc14df7f153fde6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b1a11741b5aaa124cdcca750de0a80a8e477b76d50c163f09db5f8c9819bdff"} {"level":"debug","ts":"2026-07-14T23:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fce480d53bf9fc7ca5dc52e785b753389c4af79b8270757b306be6734c57a974","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d0b9b71a53659186b69da85726a62bf5be311803b0ae623efc14df7f153fde6"} {"level":"debug","ts":"2026-07-14T23:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b1a11741b5aaa124cdcca750de0a80a8e477b76d50c163f09db5f8c9819bdff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T23:40:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T23:40:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3b1a11741b5aaa124cdcca750de0a80a8e477b76d50c163f09db5f8c9819bdff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T23:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b1a11741b5aaa124cdcca750de0a80a8e477b76d50c163f09db5f8c9819bdff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b1a11741b5aaa124cdcca750de0a80a8e477b76d50c163f09db5f8c9819bdff","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fce480d53bf9fc7ca5dc52e785b753389c4af79b8270757b306be6734c57a974"} {"level":"info","ts":"2026-07-14T23:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b1a11741b5aaa124cdcca750de0a80a8e477b76d50c163f09db5f8c9819bdff"} {"level":"debug","ts":"2026-07-14T23:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da92b24bd5b04f9d47b8e8ecd160b0959518b3ae455d09d3d796bef59185feba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc7519f5f7b079d620dc92d20fc52057effa09c8a37c814fad040ca7e3c87a73","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da92b24bd5b04f9d47b8e8ecd160b0959518b3ae455d09d3d796bef59185feba"} {"level":"debug","ts":"2026-07-14T23:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"96159c7d794987a535c7b025d07510e3899c7a9566cafb39e7c508cde87f8ce0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc7519f5f7b079d620dc92d20fc52057effa09c8a37c814fad040ca7e3c87a73"} {"level":"debug","ts":"2026-07-14T23:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"725d9af554734c77afb987221d743afcebdfef4b66c6b18d9eec74bcf4a9a5ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f6e9b9ff3477c5ce1e29a9bc049f625df3d1e1447b2ea8b1858b6b4005886c24","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96159c7d794987a535c7b025d07510e3899c7a9566cafb39e7c508cde87f8ce0"} {"level":"debug","ts":"2026-07-14T23:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5fad47ffc1d8c69c4202dba81340880877bd8073d47e151e598706074623c291","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/725d9af554734c77afb987221d743afcebdfef4b66c6b18d9eec74bcf4a9a5ab"} {"level":"debug","ts":"2026-07-14T23:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53ab23f9635b11147c40cc42694fc6439fb5c391681b9c2a2e3e14ea036daa73","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6e9b9ff3477c5ce1e29a9bc049f625df3d1e1447b2ea8b1858b6b4005886c24"} {"level":"debug","ts":"2026-07-14T23:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98556c9c17fd42ee348bf970834bf494edb3eb7ba665ec002503bf5e32ee7ab8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5fad47ffc1d8c69c4202dba81340880877bd8073d47e151e598706074623c291"} {"level":"debug","ts":"2026-07-14T23:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f5d8178ddeba6a3dfbb6ef0dee0ccff2410abad57be465bdfd0d4f7d58d965c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T23:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"042471f975b0ed4d042f6232264c48bbf7e816195824969258946ca0d03cfe3a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T23:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53ab23f9635b11147c40cc42694fc6439fb5c391681b9c2a2e3e14ea036daa73"} {"level":"info","ts":"2026-07-14T23:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98556c9c17fd42ee348bf970834bf494edb3eb7ba665ec002503bf5e32ee7ab8"} {"level":"info","ts":"2026-07-14T23:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f5d8178ddeba6a3dfbb6ef0dee0ccff2410abad57be465bdfd0d4f7d58d965c"} {"level":"info","ts":"2026-07-14T23:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/042471f975b0ed4d042f6232264c48bbf7e816195824969258946ca0d03cfe3a"} {"level":"info","ts":"2026-07-14T23:40:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2561ad2c-b36c-4550-a12a-924d6e7dba6b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:50186","PortSpecifier":{"PortValue":50186}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2561ad2c-b36c-4550-a12a-924d6e7dba6b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-d62786.apps.e22d099d-c588-4592-b2f9-ac051f108d63.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T23:40:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2561ad2c-b36c-4550-a12a-924d6e7dba6b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:50186","PortSpecifier":{"PortValue":50186}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784072451,"nanos":598201778},"http":{"id":"2561ad2c-b36c-4550-a12a-924d6e7dba6b","method":"POST","headers":{":authority":"e2e-shared-a-d62786.apps.e22d099d-c588-4592-b2f9-ac051f108d63.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T23:40:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2561ad2c-b36c-4550-a12a-924d6e7dba6b","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T23:40:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2561ad2c-b36c-4550-a12a-924d6e7dba6b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9f6cdc29-bd79-4ecd-b194-a17f6a500fce","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=97f58e18-e78c-4dbe-93a2-70a7ad5158e0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ac051f108d63"]}} {"level":"debug","ts":"2026-07-14T23:40:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2561ad2c-b36c-4550-a12a-924d6e7dba6b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ac051f108d63"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=97f58e18-e78c-4dbe-93a2-70a7ad5158e0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9f6cdc29-bd79-4ecd-b194-a17f6a500fce","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5fad47ffc1d8c69c4202dba81340880877bd8073d47e151e598706074623c291"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-d62786.apps.e22d099d-c588-4592-b2f9-ac051f108d63.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T23:40:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2561ad2c-b36c-4550-a12a-924d6e7dba6b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T23:40:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2561ad2c-b36c-4550-a12a-924d6e7dba6b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T23:40:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2561ad2c-b36c-4550-a12a-924d6e7dba6b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d62786/rate-test-model-d62786\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d62786/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T23:40:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2561ad2c-b36c-4550-a12a-924d6e7dba6b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T23:40:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2561ad2c-b36c-4550-a12a-924d6e7dba6b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T23:40:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2561ad2c-b36c-4550-a12a-924d6e7dba6b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T23:40:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2561ad2c-b36c-4550-a12a-924d6e7dba6b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T23:40:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2561ad2c-b36c-4550-a12a-924d6e7dba6b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T23:40:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4c54d13c-f891-4e57-a92c-7225f190ab6d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:35152","PortSpecifier":{"PortValue":35152}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4c54d13c-f891-4e57-a92c-7225f190ab6d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-638b58.apps.e22d099d-c588-4592-b2f9-ac051f108d63.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T23:40:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4c54d13c-f891-4e57-a92c-7225f190ab6d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:35152","PortSpecifier":{"PortValue":35152}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784072451,"nanos":637981184},"http":{"id":"4c54d13c-f891-4e57-a92c-7225f190ab6d","method":"POST","headers":{":authority":"e2e-shared-b-638b58.apps.e22d099d-c588-4592-b2f9-ac051f108d63.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T23:40:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4c54d13c-f891-4e57-a92c-7225f190ab6d","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T23:40:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4c54d13c-f891-4e57-a92c-7225f190ab6d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9f6cdc29-bd79-4ecd-b194-a17f6a500fce","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=97f58e18-e78c-4dbe-93a2-70a7ad5158e0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ac051f108d63"]}} {"level":"debug","ts":"2026-07-14T23:40:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4c54d13c-f891-4e57-a92c-7225f190ab6d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ac051f108d63"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=97f58e18-e78c-4dbe-93a2-70a7ad5158e0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9f6cdc29-bd79-4ecd-b194-a17f6a500fce","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"cae086f2dfc373e5aad98209a1a1cc4a7a4fd8bab9b2c0e3f0785b8028ec7c58"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-638b58.apps.e22d099d-c588-4592-b2f9-ac051f108d63.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T23:40:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4c54d13c-f891-4e57-a92c-7225f190ab6d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T23:40:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4c54d13c-f891-4e57-a92c-7225f190ab6d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T23:40:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4c54d13c-f891-4e57-a92c-7225f190ab6d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-638b58/rate-test-model-638b58\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-638b58/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T23:40:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4c54d13c-f891-4e57-a92c-7225f190ab6d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T23:40:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4c54d13c-f891-4e57-a92c-7225f190ab6d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T23:40:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4c54d13c-f891-4e57-a92c-7225f190ab6d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T23:40:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4c54d13c-f891-4e57-a92c-7225f190ab6d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T23:40:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4c54d13c-f891-4e57-a92c-7225f190ab6d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T23:40:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ee20915b-8346-4971-9c32-69758aa5069e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:50196","PortSpecifier":{"PortValue":50196}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ee20915b-8346-4971-9c32-69758aa5069e","method":"POST","path":"/ai-tenant-e2e-shared-a-d62786/rate-test-model-d62786/v1/completions","host":"e2e-shared-a-d62786.apps.e22d099d-c588-4592-b2f9-ac051f108d63.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T23:40:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ee20915b-8346-4971-9c32-69758aa5069e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:50196","PortSpecifier":{"PortValue":50196}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784072451,"nanos":675771010},"http":{"id":"ee20915b-8346-4971-9c32-69758aa5069e","method":"POST","headers":{":authority":"e2e-shared-a-d62786.apps.e22d099d-c588-4592-b2f9-ac051f108d63.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d62786/rate-test-model-d62786/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T23:40:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ee20915b-8346-4971-9c32-69758aa5069e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1WIvIXsQiCIAPKbkn_UIQaV1caOBysvNRstW6LPyhERVk0iQKGHZozeZEnHnG"} {"level":"debug","ts":"2026-07-14T23:40:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ee20915b-8346-4971-9c32-69758aa5069e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d62786.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1WIvIXsQiCIAPKbkn_UIQaV1caOBysvNRstW6LPyhERVk0iQKGHZozeZEnHnG\"}"} {"level":"debug","ts":"2026-07-14T23:40:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ee20915b-8346-4971-9c32-69758aa5069e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d62786.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"697b7c4b-6623-4cad-9179-40dbdf7835fe","keyName":"e2e-rate-a-653de1","subscription":"e2e-rate-iso-a-653de1","tenant":"e2e-shared-a-d62786","userId":"697b7c4b-6623-4cad-9179-40dbdf7835fe","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T23:40:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ee20915b-8346-4971-9c32-69758aa5069e","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d62786.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d62786/rate-test-model-d62786\",\"requestedSubscription\":\"e2e-rate-iso-a-653de1\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-14T23:40:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ee20915b-8346-4971-9c32-69758aa5069e","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d62786.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d62786","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-653de1","namespace":"ai-tenant-e2e-shared-a-d62786","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-14T23:40:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ee20915b-8346-4971-9c32-69758aa5069e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T23:40:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ee20915b-8346-4971-9c32-69758aa5069e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T23:40:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ee20915b-8346-4971-9c32-69758aa5069e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T23:40:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ee20915b-8346-4971-9c32-69758aa5069e","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T23:40:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ee20915b-8346-4971-9c32-69758aa5069e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d62786/rate-test-model-d62786\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d62786/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T23:40:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ee20915b-8346-4971-9c32-69758aa5069e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-653de1"} {"level":"debug","ts":"2026-07-14T23:40:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ee20915b-8346-4971-9c32-69758aa5069e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T23:40:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ee20915b-8346-4971-9c32-69758aa5069e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T23:40:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ee20915b-8346-4971-9c32-69758aa5069e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"697b7c4b-6623-4cad-9179-40dbdf7835fe","keyName":"e2e-rate-a-653de1","selected_subscription":"e2e-rate-iso-a-653de1","selected_subscription_key":"ai-tenant-e2e-shared-a-d62786/e2e-rate-iso-a-653de1@ai-tenant-e2e-shared-a-d62786/rate-test-model-d62786","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d62786","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-653de1","namespace":"ai-tenant-e2e-shared-a-d62786","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-14T23:40:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ee20915b-8346-4971-9c32-69758aa5069e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T23:40:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ee20915b-8346-4971-9c32-69758aa5069e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T23:40:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c69e964b-b02f-4b6b-8025-1a36fcc8c8d8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:50200","PortSpecifier":{"PortValue":50200}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c69e964b-b02f-4b6b-8025-1a36fcc8c8d8","method":"POST","path":"/ai-tenant-e2e-shared-a-d62786/rate-test-model-d62786/v1/completions","host":"e2e-shared-a-d62786.apps.e22d099d-c588-4592-b2f9-ac051f108d63.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T23:40:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c69e964b-b02f-4b6b-8025-1a36fcc8c8d8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:50200","PortSpecifier":{"PortValue":50200}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784072452,"nanos":736168673},"http":{"id":"c69e964b-b02f-4b6b-8025-1a36fcc8c8d8","method":"POST","headers":{":authority":"e2e-shared-a-d62786.apps.e22d099d-c588-4592-b2f9-ac051f108d63.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d62786/rate-test-model-d62786/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T23:40:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c69e964b-b02f-4b6b-8025-1a36fcc8c8d8","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1WIvIXsQiCIAPKbkn_UIQaV1caOBysvNRstW6LPyhERVk0iQKGHZozeZEnHnG"} {"level":"debug","ts":"2026-07-14T23:40:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c69e964b-b02f-4b6b-8025-1a36fcc8c8d8","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d62786.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1WIvIXsQiCIAPKbkn_UIQaV1caOBysvNRstW6LPyhERVk0iQKGHZozeZEnHnG\"}"} {"level":"debug","ts":"2026-07-14T23:40:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c69e964b-b02f-4b6b-8025-1a36fcc8c8d8","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d62786.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"697b7c4b-6623-4cad-9179-40dbdf7835fe","keyName":"e2e-rate-a-653de1","subscription":"e2e-rate-iso-a-653de1","tenant":"e2e-shared-a-d62786","userId":"697b7c4b-6623-4cad-9179-40dbdf7835fe","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T23:40:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c69e964b-b02f-4b6b-8025-1a36fcc8c8d8","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d62786.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d62786/rate-test-model-d62786\",\"requestedSubscription\":\"e2e-rate-iso-a-653de1\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-14T23:40:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c69e964b-b02f-4b6b-8025-1a36fcc8c8d8","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d62786.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d62786","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-653de1","namespace":"ai-tenant-e2e-shared-a-d62786","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-14T23:40:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c69e964b-b02f-4b6b-8025-1a36fcc8c8d8","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T23:40:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c69e964b-b02f-4b6b-8025-1a36fcc8c8d8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T23:40:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c69e964b-b02f-4b6b-8025-1a36fcc8c8d8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T23:40:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c69e964b-b02f-4b6b-8025-1a36fcc8c8d8","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T23:40:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c69e964b-b02f-4b6b-8025-1a36fcc8c8d8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d62786/rate-test-model-d62786\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d62786/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T23:40:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c69e964b-b02f-4b6b-8025-1a36fcc8c8d8","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T23:40:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c69e964b-b02f-4b6b-8025-1a36fcc8c8d8","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-653de1"} {"level":"debug","ts":"2026-07-14T23:40:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c69e964b-b02f-4b6b-8025-1a36fcc8c8d8","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T23:40:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c69e964b-b02f-4b6b-8025-1a36fcc8c8d8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"697b7c4b-6623-4cad-9179-40dbdf7835fe","keyName":"e2e-rate-a-653de1","selected_subscription":"e2e-rate-iso-a-653de1","selected_subscription_key":"ai-tenant-e2e-shared-a-d62786/e2e-rate-iso-a-653de1@ai-tenant-e2e-shared-a-d62786/rate-test-model-d62786","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d62786","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-653de1","namespace":"ai-tenant-e2e-shared-a-d62786","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-14T23:40:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c69e964b-b02f-4b6b-8025-1a36fcc8c8d8","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T23:40:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c69e964b-b02f-4b6b-8025-1a36fcc8c8d8","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T23:40:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"47c9deaa-f801-4a11-a2db-ba2cdcd334e9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:50206","PortSpecifier":{"PortValue":50206}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"47c9deaa-f801-4a11-a2db-ba2cdcd334e9","method":"POST","path":"/ai-tenant-e2e-shared-a-d62786/rate-test-model-d62786/v1/completions","host":"e2e-shared-a-d62786.apps.e22d099d-c588-4592-b2f9-ac051f108d63.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T23:40:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"47c9deaa-f801-4a11-a2db-ba2cdcd334e9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:50206","PortSpecifier":{"PortValue":50206}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784072453,"nanos":774058514},"http":{"id":"47c9deaa-f801-4a11-a2db-ba2cdcd334e9","method":"POST","headers":{":authority":"e2e-shared-a-d62786.apps.e22d099d-c588-4592-b2f9-ac051f108d63.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d62786/rate-test-model-d62786/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T23:40:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"47c9deaa-f801-4a11-a2db-ba2cdcd334e9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1WIvIXsQiCIAPKbkn_UIQaV1caOBysvNRstW6LPyhERVk0iQKGHZozeZEnHnG"} {"level":"debug","ts":"2026-07-14T23:40:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"47c9deaa-f801-4a11-a2db-ba2cdcd334e9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d62786.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1WIvIXsQiCIAPKbkn_UIQaV1caOBysvNRstW6LPyhERVk0iQKGHZozeZEnHnG\"}"} {"level":"debug","ts":"2026-07-14T23:40:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"47c9deaa-f801-4a11-a2db-ba2cdcd334e9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d62786.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"697b7c4b-6623-4cad-9179-40dbdf7835fe","keyName":"e2e-rate-a-653de1","subscription":"e2e-rate-iso-a-653de1","tenant":"e2e-shared-a-d62786","userId":"697b7c4b-6623-4cad-9179-40dbdf7835fe","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T23:40:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"47c9deaa-f801-4a11-a2db-ba2cdcd334e9","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d62786.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d62786/rate-test-model-d62786\",\"requestedSubscription\":\"e2e-rate-iso-a-653de1\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-14T23:40:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"47c9deaa-f801-4a11-a2db-ba2cdcd334e9","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d62786.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d62786","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-653de1","namespace":"ai-tenant-e2e-shared-a-d62786","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-14T23:40:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"47c9deaa-f801-4a11-a2db-ba2cdcd334e9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T23:40:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"47c9deaa-f801-4a11-a2db-ba2cdcd334e9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T23:40:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"47c9deaa-f801-4a11-a2db-ba2cdcd334e9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T23:40:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"47c9deaa-f801-4a11-a2db-ba2cdcd334e9","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T23:40:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"47c9deaa-f801-4a11-a2db-ba2cdcd334e9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d62786/rate-test-model-d62786\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d62786/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T23:40:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"47c9deaa-f801-4a11-a2db-ba2cdcd334e9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T23:40:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"47c9deaa-f801-4a11-a2db-ba2cdcd334e9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-653de1"} {"level":"debug","ts":"2026-07-14T23:40:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"47c9deaa-f801-4a11-a2db-ba2cdcd334e9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T23:40:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"47c9deaa-f801-4a11-a2db-ba2cdcd334e9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"697b7c4b-6623-4cad-9179-40dbdf7835fe","keyName":"e2e-rate-a-653de1","selected_subscription":"e2e-rate-iso-a-653de1","selected_subscription_key":"ai-tenant-e2e-shared-a-d62786/e2e-rate-iso-a-653de1@ai-tenant-e2e-shared-a-d62786/rate-test-model-d62786","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d62786","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-653de1","namespace":"ai-tenant-e2e-shared-a-d62786","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-14T23:40:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"47c9deaa-f801-4a11-a2db-ba2cdcd334e9","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T23:40:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"47c9deaa-f801-4a11-a2db-ba2cdcd334e9","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T23:41:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7c02827f-f5ef-4bb6-ab1b-3abd5cef8a97","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:44206","PortSpecifier":{"PortValue":44206}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7c02827f-f5ef-4bb6-ab1b-3abd5cef8a97","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-d62786.apps.e22d099d-c588-4592-b2f9-ac051f108d63.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T23:41:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7c02827f-f5ef-4bb6-ab1b-3abd5cef8a97","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:44206","PortSpecifier":{"PortValue":44206}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784072466,"nanos":741206864},"http":{"id":"7c02827f-f5ef-4bb6-ab1b-3abd5cef8a97","method":"POST","headers":{":authority":"e2e-shared-a-d62786.apps.e22d099d-c588-4592-b2f9-ac051f108d63.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T23:41:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7c02827f-f5ef-4bb6-ab1b-3abd5cef8a97","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T23:41:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7c02827f-f5ef-4bb6-ab1b-3abd5cef8a97","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9f6cdc29-bd79-4ecd-b194-a17f6a500fce","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=97f58e18-e78c-4dbe-93a2-70a7ad5158e0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ac051f108d63"]}} {"level":"debug","ts":"2026-07-14T23:41:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7c02827f-f5ef-4bb6-ab1b-3abd5cef8a97","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ac051f108d63"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=97f58e18-e78c-4dbe-93a2-70a7ad5158e0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9f6cdc29-bd79-4ecd-b194-a17f6a500fce","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5fad47ffc1d8c69c4202dba81340880877bd8073d47e151e598706074623c291"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-d62786.apps.e22d099d-c588-4592-b2f9-ac051f108d63.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T23:41:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7c02827f-f5ef-4bb6-ab1b-3abd5cef8a97","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T23:41:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7c02827f-f5ef-4bb6-ab1b-3abd5cef8a97","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T23:41:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7c02827f-f5ef-4bb6-ab1b-3abd5cef8a97","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d62786/rate-test-model-d62786\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d62786/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T23:41:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7c02827f-f5ef-4bb6-ab1b-3abd5cef8a97","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T23:41:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7c02827f-f5ef-4bb6-ab1b-3abd5cef8a97","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T23:41:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7c02827f-f5ef-4bb6-ab1b-3abd5cef8a97","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-14T23:41:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7c02827f-f5ef-4bb6-ab1b-3abd5cef8a97","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T23:41:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7c02827f-f5ef-4bb6-ab1b-3abd5cef8a97","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T23:41:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"24415132-511d-4a78-9a84-1c816e75a87c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:41330","PortSpecifier":{"PortValue":41330}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"24415132-511d-4a78-9a84-1c816e75a87c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-638b58.apps.e22d099d-c588-4592-b2f9-ac051f108d63.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T23:41:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"24415132-511d-4a78-9a84-1c816e75a87c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:41330","PortSpecifier":{"PortValue":41330}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784072466,"nanos":774365531},"http":{"id":"24415132-511d-4a78-9a84-1c816e75a87c","method":"POST","headers":{":authority":"e2e-shared-b-638b58.apps.e22d099d-c588-4592-b2f9-ac051f108d63.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T23:41:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"24415132-511d-4a78-9a84-1c816e75a87c","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T23:41:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"24415132-511d-4a78-9a84-1c816e75a87c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9f6cdc29-bd79-4ecd-b194-a17f6a500fce","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=97f58e18-e78c-4dbe-93a2-70a7ad5158e0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ac051f108d63"]}} {"level":"debug","ts":"2026-07-14T23:41:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"24415132-511d-4a78-9a84-1c816e75a87c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ac051f108d63"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=97f58e18-e78c-4dbe-93a2-70a7ad5158e0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9f6cdc29-bd79-4ecd-b194-a17f6a500fce","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"cae086f2dfc373e5aad98209a1a1cc4a7a4fd8bab9b2c0e3f0785b8028ec7c58"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-638b58.apps.e22d099d-c588-4592-b2f9-ac051f108d63.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T23:41:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"24415132-511d-4a78-9a84-1c816e75a87c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T23:41:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"24415132-511d-4a78-9a84-1c816e75a87c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T23:41:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"24415132-511d-4a78-9a84-1c816e75a87c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-638b58/rate-test-model-638b58\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-638b58/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T23:41:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"24415132-511d-4a78-9a84-1c816e75a87c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T23:41:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"24415132-511d-4a78-9a84-1c816e75a87c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T23:41:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"24415132-511d-4a78-9a84-1c816e75a87c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T23:41:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"24415132-511d-4a78-9a84-1c816e75a87c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T23:41:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"24415132-511d-4a78-9a84-1c816e75a87c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T23:41:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e4840db8-b6cc-416f-9781-6f7929d7a99b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:44220","PortSpecifier":{"PortValue":44220}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e4840db8-b6cc-416f-9781-6f7929d7a99b","method":"POST","path":"/ai-tenant-e2e-shared-a-d62786/rate-test-model-d62786/v1/completions","host":"e2e-shared-a-d62786.apps.e22d099d-c588-4592-b2f9-ac051f108d63.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T23:41:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e4840db8-b6cc-416f-9781-6f7929d7a99b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:44220","PortSpecifier":{"PortValue":44220}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784072466,"nanos":811210100},"http":{"id":"e4840db8-b6cc-416f-9781-6f7929d7a99b","method":"POST","headers":{":authority":"e2e-shared-a-d62786.apps.e22d099d-c588-4592-b2f9-ac051f108d63.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d62786/rate-test-model-d62786/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T23:41:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e4840db8-b6cc-416f-9781-6f7929d7a99b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-mvEGqPBXFid4evvN_lPTZQWTZUDPfrosMeRO3Ap0eZ1BPkpNgHYcbEovCifr"} {"level":"debug","ts":"2026-07-14T23:41:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e4840db8-b6cc-416f-9781-6f7929d7a99b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d62786.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-mvEGqPBXFid4evvN_lPTZQWTZUDPfrosMeRO3Ap0eZ1BPkpNgHYcbEovCifr\"}"} {"level":"debug","ts":"2026-07-14T23:41:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e4840db8-b6cc-416f-9781-6f7929d7a99b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d62786.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"fd85c8ff-2699-424a-9361-c8381c1642c5","keyName":"e2e-rate-a-a89ae9","subscription":"e2e-rate-iso-a-a89ae9","tenant":"e2e-shared-a-d62786","userId":"fd85c8ff-2699-424a-9361-c8381c1642c5","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T23:41:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e4840db8-b6cc-416f-9781-6f7929d7a99b","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d62786.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d62786/rate-test-model-d62786\",\"requestedSubscription\":\"e2e-rate-iso-a-a89ae9\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-14T23:41:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e4840db8-b6cc-416f-9781-6f7929d7a99b","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d62786.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d62786","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a89ae9","namespace":"ai-tenant-e2e-shared-a-d62786","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-14T23:41:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e4840db8-b6cc-416f-9781-6f7929d7a99b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T23:41:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e4840db8-b6cc-416f-9781-6f7929d7a99b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T23:41:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e4840db8-b6cc-416f-9781-6f7929d7a99b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T23:41:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e4840db8-b6cc-416f-9781-6f7929d7a99b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d62786/rate-test-model-d62786\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d62786/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T23:41:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e4840db8-b6cc-416f-9781-6f7929d7a99b","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T23:41:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e4840db8-b6cc-416f-9781-6f7929d7a99b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T23:41:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e4840db8-b6cc-416f-9781-6f7929d7a99b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T23:41:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e4840db8-b6cc-416f-9781-6f7929d7a99b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a89ae9"} {"level":"debug","ts":"2026-07-14T23:41:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e4840db8-b6cc-416f-9781-6f7929d7a99b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"fd85c8ff-2699-424a-9361-c8381c1642c5","keyName":"e2e-rate-a-a89ae9","selected_subscription":"e2e-rate-iso-a-a89ae9","selected_subscription_key":"ai-tenant-e2e-shared-a-d62786/e2e-rate-iso-a-a89ae9@ai-tenant-e2e-shared-a-d62786/rate-test-model-d62786","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d62786","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a89ae9","namespace":"ai-tenant-e2e-shared-a-d62786","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-14T23:41:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e4840db8-b6cc-416f-9781-6f7929d7a99b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T23:41:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e4840db8-b6cc-416f-9781-6f7929d7a99b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T23:41:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"44bf49b9-a254-43d5-9414-804f47e24e84","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:44232","PortSpecifier":{"PortValue":44232}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"44bf49b9-a254-43d5-9414-804f47e24e84","method":"POST","path":"/ai-tenant-e2e-shared-a-d62786/rate-test-model-d62786/v1/completions","host":"e2e-shared-a-d62786.apps.e22d099d-c588-4592-b2f9-ac051f108d63.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T23:41:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"44bf49b9-a254-43d5-9414-804f47e24e84","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:44232","PortSpecifier":{"PortValue":44232}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784072467,"nanos":875005050},"http":{"id":"44bf49b9-a254-43d5-9414-804f47e24e84","method":"POST","headers":{":authority":"e2e-shared-a-d62786.apps.e22d099d-c588-4592-b2f9-ac051f108d63.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d62786/rate-test-model-d62786/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T23:41:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"44bf49b9-a254-43d5-9414-804f47e24e84","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-mvEGqPBXFid4evvN_lPTZQWTZUDPfrosMeRO3Ap0eZ1BPkpNgHYcbEovCifr"} {"level":"debug","ts":"2026-07-14T23:41:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"44bf49b9-a254-43d5-9414-804f47e24e84","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d62786.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-mvEGqPBXFid4evvN_lPTZQWTZUDPfrosMeRO3Ap0eZ1BPkpNgHYcbEovCifr\"}"} {"level":"debug","ts":"2026-07-14T23:41:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"44bf49b9-a254-43d5-9414-804f47e24e84","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d62786.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"fd85c8ff-2699-424a-9361-c8381c1642c5","keyName":"e2e-rate-a-a89ae9","subscription":"e2e-rate-iso-a-a89ae9","tenant":"e2e-shared-a-d62786","userId":"fd85c8ff-2699-424a-9361-c8381c1642c5","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T23:41:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"44bf49b9-a254-43d5-9414-804f47e24e84","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d62786.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d62786/rate-test-model-d62786\",\"requestedSubscription\":\"e2e-rate-iso-a-a89ae9\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-14T23:41:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"44bf49b9-a254-43d5-9414-804f47e24e84","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d62786.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d62786","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a89ae9","namespace":"ai-tenant-e2e-shared-a-d62786","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-14T23:41:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"44bf49b9-a254-43d5-9414-804f47e24e84","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T23:41:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"44bf49b9-a254-43d5-9414-804f47e24e84","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T23:41:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"44bf49b9-a254-43d5-9414-804f47e24e84","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T23:41:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"44bf49b9-a254-43d5-9414-804f47e24e84","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d62786/rate-test-model-d62786\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d62786/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T23:41:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"44bf49b9-a254-43d5-9414-804f47e24e84","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T23:41:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"44bf49b9-a254-43d5-9414-804f47e24e84","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a89ae9"} {"level":"debug","ts":"2026-07-14T23:41:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"44bf49b9-a254-43d5-9414-804f47e24e84","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T23:41:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"44bf49b9-a254-43d5-9414-804f47e24e84","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T23:41:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"44bf49b9-a254-43d5-9414-804f47e24e84","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"fd85c8ff-2699-424a-9361-c8381c1642c5","keyName":"e2e-rate-a-a89ae9","selected_subscription":"e2e-rate-iso-a-a89ae9","selected_subscription_key":"ai-tenant-e2e-shared-a-d62786/e2e-rate-iso-a-a89ae9@ai-tenant-e2e-shared-a-d62786/rate-test-model-d62786","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d62786","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a89ae9","namespace":"ai-tenant-e2e-shared-a-d62786","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-14T23:41:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"44bf49b9-a254-43d5-9414-804f47e24e84","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T23:41:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"44bf49b9-a254-43d5-9414-804f47e24e84","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T23:41:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e5bd728e-a9ec-492c-9de5-8b3cbb8e794c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:44236","PortSpecifier":{"PortValue":44236}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e5bd728e-a9ec-492c-9de5-8b3cbb8e794c","method":"POST","path":"/ai-tenant-e2e-shared-a-d62786/rate-test-model-d62786/v1/completions","host":"e2e-shared-a-d62786.apps.e22d099d-c588-4592-b2f9-ac051f108d63.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T23:41:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e5bd728e-a9ec-492c-9de5-8b3cbb8e794c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:44236","PortSpecifier":{"PortValue":44236}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784072468,"nanos":910109604},"http":{"id":"e5bd728e-a9ec-492c-9de5-8b3cbb8e794c","method":"POST","headers":{":authority":"e2e-shared-a-d62786.apps.e22d099d-c588-4592-b2f9-ac051f108d63.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d62786/rate-test-model-d62786/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T23:41:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e5bd728e-a9ec-492c-9de5-8b3cbb8e794c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-mvEGqPBXFid4evvN_lPTZQWTZUDPfrosMeRO3Ap0eZ1BPkpNgHYcbEovCifr"} {"level":"debug","ts":"2026-07-14T23:41:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e5bd728e-a9ec-492c-9de5-8b3cbb8e794c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d62786.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-mvEGqPBXFid4evvN_lPTZQWTZUDPfrosMeRO3Ap0eZ1BPkpNgHYcbEovCifr\"}"} {"level":"debug","ts":"2026-07-14T23:41:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e5bd728e-a9ec-492c-9de5-8b3cbb8e794c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d62786.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"fd85c8ff-2699-424a-9361-c8381c1642c5","keyName":"e2e-rate-a-a89ae9","subscription":"e2e-rate-iso-a-a89ae9","tenant":"e2e-shared-a-d62786","userId":"fd85c8ff-2699-424a-9361-c8381c1642c5","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T23:41:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e5bd728e-a9ec-492c-9de5-8b3cbb8e794c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d62786.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d62786/rate-test-model-d62786\",\"requestedSubscription\":\"e2e-rate-iso-a-a89ae9\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-14T23:41:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e5bd728e-a9ec-492c-9de5-8b3cbb8e794c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d62786.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d62786","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a89ae9","namespace":"ai-tenant-e2e-shared-a-d62786","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-14T23:41:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e5bd728e-a9ec-492c-9de5-8b3cbb8e794c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T23:41:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e5bd728e-a9ec-492c-9de5-8b3cbb8e794c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T23:41:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e5bd728e-a9ec-492c-9de5-8b3cbb8e794c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T23:41:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e5bd728e-a9ec-492c-9de5-8b3cbb8e794c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d62786/rate-test-model-d62786\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d62786/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T23:41:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e5bd728e-a9ec-492c-9de5-8b3cbb8e794c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T23:41:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e5bd728e-a9ec-492c-9de5-8b3cbb8e794c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T23:41:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e5bd728e-a9ec-492c-9de5-8b3cbb8e794c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a89ae9"} {"level":"debug","ts":"2026-07-14T23:41:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e5bd728e-a9ec-492c-9de5-8b3cbb8e794c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T23:41:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e5bd728e-a9ec-492c-9de5-8b3cbb8e794c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"fd85c8ff-2699-424a-9361-c8381c1642c5","keyName":"e2e-rate-a-a89ae9","selected_subscription":"e2e-rate-iso-a-a89ae9","selected_subscription_key":"ai-tenant-e2e-shared-a-d62786/e2e-rate-iso-a-a89ae9@ai-tenant-e2e-shared-a-d62786/rate-test-model-d62786","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d62786","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a89ae9","namespace":"ai-tenant-e2e-shared-a-d62786","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-14T23:41:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e5bd728e-a9ec-492c-9de5-8b3cbb8e794c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T23:41:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e5bd728e-a9ec-492c-9de5-8b3cbb8e794c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T23:41:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3b1de354-7fff-42bc-997b-61fceb9e4f3c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:41342","PortSpecifier":{"PortValue":41342}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3b1de354-7fff-42bc-997b-61fceb9e4f3c","method":"POST","path":"/ai-tenant-e2e-shared-b-638b58/rate-test-model-638b58/v1/completions","host":"e2e-shared-b-638b58.apps.e22d099d-c588-4592-b2f9-ac051f108d63.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T23:41:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3b1de354-7fff-42bc-997b-61fceb9e4f3c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:41342","PortSpecifier":{"PortValue":41342}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784072468,"nanos":948239742},"http":{"id":"3b1de354-7fff-42bc-997b-61fceb9e4f3c","method":"POST","headers":{":authority":"e2e-shared-b-638b58.apps.e22d099d-c588-4592-b2f9-ac051f108d63.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-638b58/rate-test-model-638b58/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T23:41:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3b1de354-7fff-42bc-997b-61fceb9e4f3c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-YuQFRvA9ZHwqirzI_2akSEDBBRrjZRr2ct9GX6bbp9TcMKeqEO2qGzDEfMR9"} {"level":"debug","ts":"2026-07-14T23:41:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3b1de354-7fff-42bc-997b-61fceb9e4f3c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-638b58.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-YuQFRvA9ZHwqirzI_2akSEDBBRrjZRr2ct9GX6bbp9TcMKeqEO2qGzDEfMR9\"}"} {"level":"debug","ts":"2026-07-14T23:41:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3b1de354-7fff-42bc-997b-61fceb9e4f3c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-638b58.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"de8ad2c6-a48e-438a-b633-b61c392543a1","keyName":"e2e-rate-b-a89ae9","subscription":"e2e-rate-iso-b-a89ae9","tenant":"e2e-shared-b-638b58","userId":"de8ad2c6-a48e-438a-b633-b61c392543a1","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T23:41:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3b1de354-7fff-42bc-997b-61fceb9e4f3c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-638b58.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-638b58/rate-test-model-638b58\",\"requestedSubscription\":\"e2e-rate-iso-b-a89ae9\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-14T23:41:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3b1de354-7fff-42bc-997b-61fceb9e4f3c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-638b58.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-638b58","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-a89ae9","namespace":"ai-tenant-e2e-shared-b-638b58","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-14T23:41:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3b1de354-7fff-42bc-997b-61fceb9e4f3c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T23:41:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3b1de354-7fff-42bc-997b-61fceb9e4f3c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T23:41:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3b1de354-7fff-42bc-997b-61fceb9e4f3c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T23:41:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3b1de354-7fff-42bc-997b-61fceb9e4f3c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T23:41:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3b1de354-7fff-42bc-997b-61fceb9e4f3c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-638b58/rate-test-model-638b58\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-638b58/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T23:41:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3b1de354-7fff-42bc-997b-61fceb9e4f3c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-a89ae9"} {"level":"debug","ts":"2026-07-14T23:41:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3b1de354-7fff-42bc-997b-61fceb9e4f3c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T23:41:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3b1de354-7fff-42bc-997b-61fceb9e4f3c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T23:41:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3b1de354-7fff-42bc-997b-61fceb9e4f3c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"de8ad2c6-a48e-438a-b633-b61c392543a1","keyName":"e2e-rate-b-a89ae9","selected_subscription":"e2e-rate-iso-b-a89ae9","selected_subscription_key":"ai-tenant-e2e-shared-b-638b58/e2e-rate-iso-b-a89ae9@ai-tenant-e2e-shared-b-638b58/rate-test-model-638b58","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-638b58","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-a89ae9","namespace":"ai-tenant-e2e-shared-b-638b58","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-14T23:41:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3b1de354-7fff-42bc-997b-61fceb9e4f3c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T23:41:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3b1de354-7fff-42bc-997b-61fceb9e4f3c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T23:41:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/725d9af554734c77afb987221d743afcebdfef4b66c6b18d9eec74bcf4a9a5ab"} {"level":"info","ts":"2026-07-14T23:41:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4f52a7b00d0dc0d9254dd00890d7223c9660ea8c361d851e201137ecbcdbb105"} {"level":"info","ts":"2026-07-14T23:41:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f6e9b9ff3477c5ce1e29a9bc049f625df3d1e1447b2ea8b1858b6b4005886c24"} {"level":"info","ts":"2026-07-14T23:41:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/da92b24bd5b04f9d47b8e8ecd160b0959518b3ae455d09d3d796bef59185feba"} {"level":"info","ts":"2026-07-14T23:41:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3b1a11741b5aaa124cdcca750de0a80a8e477b76d50c163f09db5f8c9819bdff"} {"level":"info","ts":"2026-07-14T23:41:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a01fd812ab34b6ab5303ba04a5e07228ecd730774a4b62429c2056af3ed1fb01"} {"level":"info","ts":"2026-07-14T23:41:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9c1bcf011424fb4a84909d5dd38bae1fec0e8995c2b1eb2b80d6c74fd2e3969a"} {"level":"info","ts":"2026-07-14T23:41:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1d0b9b71a53659186b69da85726a62bf5be311803b0ae623efc14df7f153fde6"} {"level":"info","ts":"2026-07-14T23:41:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6f4221cdffa905b1b64bc6cdf1a1ae7ad3c15cdf480f9957125884ef81611468"} {"level":"info","ts":"2026-07-14T23:41:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e512e96efb6785545a172b0917a291e8420cd9e8f9876760d20d3e12cd9134d6"} {"level":"info","ts":"2026-07-14T23:41:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/96159c7d794987a535c7b025d07510e3899c7a9566cafb39e7c508cde87f8ce0"} {"level":"info","ts":"2026-07-14T23:41:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/86061b69201a18a2247e6742e46218ef8a2176e145bcb9453ba66a9b6bb35dbc"} {"level":"info","ts":"2026-07-14T23:41:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c44fe003a5e73188d79919e5f7dc5e07d565d80818c4d204d2a749440f336b03"} {"level":"info","ts":"2026-07-14T23:41:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/84a8061a2c6443fc7ea2d64a53847a3bedca7314c5c2e2210e344c7afd524640"} {"level":"info","ts":"2026-07-14T23:41:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/98556c9c17fd42ee348bf970834bf494edb3eb7ba665ec002503bf5e32ee7ab8"} {"level":"info","ts":"2026-07-14T23:41:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cc7519f5f7b079d620dc92d20fc52057effa09c8a37c814fad040ca7e3c87a73"} {"level":"info","ts":"2026-07-14T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d1573b87ef683f20144eeabe3dafa59d6ea5ad4e8e826790e689a5ab916693a7"} {"level":"info","ts":"2026-07-14T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/20074b64f0086a356b1519bbbfe7ebb80bb8ee9794ba55311d3c98dcf9498314"} {"level":"info","ts":"2026-07-14T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/53ab23f9635b11147c40cc42694fc6439fb5c391681b9c2a2e3e14ea036daa73"} {"level":"info","ts":"2026-07-14T23:41:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5fad47ffc1d8c69c4202dba81340880877bd8073d47e151e598706074623c291"} {"level":"info","ts":"2026-07-14T23:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cae086f2dfc373e5aad98209a1a1cc4a7a4fd8bab9b2c0e3f0785b8028ec7c58"} {"level":"info","ts":"2026-07-14T23:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/042471f975b0ed4d042f6232264c48bbf7e816195824969258946ca0d03cfe3a"} {"level":"info","ts":"2026-07-14T23:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5f5d8178ddeba6a3dfbb6ef0dee0ccff2410abad57be465bdfd0d4f7d58d965c"} {"level":"info","ts":"2026-07-14T23:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fce480d53bf9fc7ca5dc52e785b753389c4af79b8270757b306be6734c57a974"}