--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) --- {"level":"info","ts":"2026-07-24T15:13:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff959bfe71f7cbfe05d8cb9ede8282650d0cc5dd7e5e6631f5c5157be9609bcc"} {"level":"info","ts":"2026-07-24T15:13:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:13:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55a5d4ab21bb36f7f40978ce640f1e48428a71b01d8a07eff1fd4260ceb86991","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:13:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:13:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["55a5d4ab21bb36f7f40978ce640f1e48428a71b01d8a07eff1fd4260ceb86991"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:13:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b63e986f099db6dded059b613fdc61522ac42647ee6624458f88a0fe4a80b4c6"} {"level":"info","ts":"2026-07-24T15:13:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55a5d4ab21bb36f7f40978ce640f1e48428a71b01d8a07eff1fd4260ceb86991","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:13:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b63e986f099db6dded059b613fdc61522ac42647ee6624458f88a0fe4a80b4c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:13:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:13:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:13:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:13:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9"} {"level":"info","ts":"2026-07-24T15:13:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:13:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30e3b2e24610402717b46509ada91e36cb1b724aa3f04b3a914c4a2c756f18d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:13:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:13:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:13:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30e3b2e24610402717b46509ada91e36cb1b724aa3f04b3a914c4a2c756f18d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:13:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55a5d4ab21bb36f7f40978ce640f1e48428a71b01d8a07eff1fd4260ceb86991","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:13:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:13:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:13:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55a5d4ab21bb36f7f40978ce640f1e48428a71b01d8a07eff1fd4260ceb86991","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:13:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:13:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:13:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:13:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55a5d4ab21bb36f7f40978ce640f1e48428a71b01d8a07eff1fd4260ceb86991"} {"level":"info","ts":"2026-07-24T15:13:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:13:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30e3b2e24610402717b46509ada91e36cb1b724aa3f04b3a914c4a2c756f18d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:13:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:13:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:13:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30e3b2e24610402717b46509ada91e36cb1b724aa3f04b3a914c4a2c756f18d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:13:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55a5d4ab21bb36f7f40978ce640f1e48428a71b01d8a07eff1fd4260ceb86991","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:13:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:13:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["55a5d4ab21bb36f7f40978ce640f1e48428a71b01d8a07eff1fd4260ceb86991"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:13:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55a5d4ab21bb36f7f40978ce640f1e48428a71b01d8a07eff1fd4260ceb86991","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:13:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:13:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30e3b2e24610402717b46509ada91e36cb1b724aa3f04b3a914c4a2c756f18d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:13:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55a5d4ab21bb36f7f40978ce640f1e48428a71b01d8a07eff1fd4260ceb86991","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T15:13:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30e3b2e24610402717b46509ada91e36cb1b724aa3f04b3a914c4a2c756f18d3"} {"level":"debug","ts":"2026-07-24T15:13:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30e3b2e24610402717b46509ada91e36cb1b724aa3f04b3a914c4a2c756f18d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:13:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:13:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["30e3b2e24610402717b46509ada91e36cb1b724aa3f04b3a914c4a2c756f18d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:13:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30e3b2e24610402717b46509ada91e36cb1b724aa3f04b3a914c4a2c756f18d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:13:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30e3b2e24610402717b46509ada91e36cb1b724aa3f04b3a914c4a2c756f18d3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T15:13:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9"} {"level":"info","ts":"2026-07-24T15:13:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55a5d4ab21bb36f7f40978ce640f1e48428a71b01d8a07eff1fd4260ceb86991"} {"level":"debug","ts":"2026-07-24T15:13:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c418244c8795aafcaa38df340a22943da5e6dc77f4f8c2d142afad2a76c0fc8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:13:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:13:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:13:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30e3b2e24610402717b46509ada91e36cb1b724aa3f04b3a914c4a2c756f18d3"} {"level":"info","ts":"2026-07-24T15:13:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c418244c8795aafcaa38df340a22943da5e6dc77f4f8c2d142afad2a76c0fc8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:13:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec52c6d3b8a955cc3a1d7369130807518bdb644b303ee7de4d3dd709211ca4f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:13:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:13:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:13:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c418244c8795aafcaa38df340a22943da5e6dc77f4f8c2d142afad2a76c0fc8"} {"level":"info","ts":"2026-07-24T15:13:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec52c6d3b8a955cc3a1d7369130807518bdb644b303ee7de4d3dd709211ca4f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:13:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c418244c8795aafcaa38df340a22943da5e6dc77f4f8c2d142afad2a76c0fc8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:13:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:13:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c418244c8795aafcaa38df340a22943da5e6dc77f4f8c2d142afad2a76c0fc8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:13:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c418244c8795aafcaa38df340a22943da5e6dc77f4f8c2d142afad2a76c0fc8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:13:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec52c6d3b8a955cc3a1d7369130807518bdb644b303ee7de4d3dd709211ca4f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:13:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:13:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:13:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec52c6d3b8a955cc3a1d7369130807518bdb644b303ee7de4d3dd709211ca4f7"} {"level":"info","ts":"2026-07-24T15:13:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec52c6d3b8a955cc3a1d7369130807518bdb644b303ee7de4d3dd709211ca4f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:13:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c418244c8795aafcaa38df340a22943da5e6dc77f4f8c2d142afad2a76c0fc8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:13:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:13:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:13:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c418244c8795aafcaa38df340a22943da5e6dc77f4f8c2d142afad2a76c0fc8"} {"level":"info","ts":"2026-07-24T15:13:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c418244c8795aafcaa38df340a22943da5e6dc77f4f8c2d142afad2a76c0fc8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:13:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec52c6d3b8a955cc3a1d7369130807518bdb644b303ee7de4d3dd709211ca4f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:13:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c418244c8795aafcaa38df340a22943da5e6dc77f4f8c2d142afad2a76c0fc8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:13:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:13:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c418244c8795aafcaa38df340a22943da5e6dc77f4f8c2d142afad2a76c0fc8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:13:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c418244c8795aafcaa38df340a22943da5e6dc77f4f8c2d142afad2a76c0fc8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:13:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c418244c8795aafcaa38df340a22943da5e6dc77f4f8c2d142afad2a76c0fc8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:13:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:13:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c418244c8795aafcaa38df340a22943da5e6dc77f4f8c2d142afad2a76c0fc8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:13:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec52c6d3b8a955cc3a1d7369130807518bdb644b303ee7de4d3dd709211ca4f7"} {"level":"error","ts":"2026-07-24T15:13:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3c418244c8795aafcaa38df340a22943da5e6dc77f4f8c2d142afad2a76c0fc8","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3c418244c8795aafcaa38df340a22943da5e6dc77f4f8c2d142afad2a76c0fc8\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T15:13:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec52c6d3b8a955cc3a1d7369130807518bdb644b303ee7de4d3dd709211ca4f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:13:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:13:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec52c6d3b8a955cc3a1d7369130807518bdb644b303ee7de4d3dd709211ca4f7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:13:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c418244c8795aafcaa38df340a22943da5e6dc77f4f8c2d142afad2a76c0fc8"} {"level":"info","ts":"2026-07-24T15:13:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec52c6d3b8a955cc3a1d7369130807518bdb644b303ee7de4d3dd709211ca4f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:13:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c418244c8795aafcaa38df340a22943da5e6dc77f4f8c2d142afad2a76c0fc8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:13:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec52c6d3b8a955cc3a1d7369130807518bdb644b303ee7de4d3dd709211ca4f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:13:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:13:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:13:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec52c6d3b8a955cc3a1d7369130807518bdb644b303ee7de4d3dd709211ca4f7"} {"level":"info","ts":"2026-07-24T15:13:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec52c6d3b8a955cc3a1d7369130807518bdb644b303ee7de4d3dd709211ca4f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:13:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cac0d1ed8c9ebc34639a723d1de883cd26d05c7a3fb8fe0f74efda5642dff75a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:13:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:13:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:13:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cac0d1ed8c9ebc34639a723d1de883cd26d05c7a3fb8fe0f74efda5642dff75a"} {"level":"info","ts":"2026-07-24T15:13:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec52c6d3b8a955cc3a1d7369130807518bdb644b303ee7de4d3dd709211ca4f7"} {"level":"info","ts":"2026-07-24T15:13:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cac0d1ed8c9ebc34639a723d1de883cd26d05c7a3fb8fe0f74efda5642dff75a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:13:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec52c6d3b8a955cc3a1d7369130807518bdb644b303ee7de4d3dd709211ca4f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:13:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:13:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec52c6d3b8a955cc3a1d7369130807518bdb644b303ee7de4d3dd709211ca4f7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:13:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70457a4997d89ab3bd4e8054dcad44c81fd895c75e00128e2cd4439ddb265e28"} {"level":"info","ts":"2026-07-24T15:13:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/165f56966fce28cfdb6d60ad2e0198e3638e4857a25c2ba3d30e29096006c671"} {"level":"info","ts":"2026-07-24T15:13:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec52c6d3b8a955cc3a1d7369130807518bdb644b303ee7de4d3dd709211ca4f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:13:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70457a4997d89ab3bd4e8054dcad44c81fd895c75e00128e2cd4439ddb265e28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:13:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:13:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["70457a4997d89ab3bd4e8054dcad44c81fd895c75e00128e2cd4439ddb265e28"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:13:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cac0d1ed8c9ebc34639a723d1de883cd26d05c7a3fb8fe0f74efda5642dff75a"} {"level":"info","ts":"2026-07-24T15:13:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec52c6d3b8a955cc3a1d7369130807518bdb644b303ee7de4d3dd709211ca4f7"} {"level":"info","ts":"2026-07-24T15:13:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70457a4997d89ab3bd4e8054dcad44c81fd895c75e00128e2cd4439ddb265e28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:13:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"165f56966fce28cfdb6d60ad2e0198e3638e4857a25c2ba3d30e29096006c671","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:13:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:13:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["165f56966fce28cfdb6d60ad2e0198e3638e4857a25c2ba3d30e29096006c671"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:13:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70457a4997d89ab3bd4e8054dcad44c81fd895c75e00128e2cd4439ddb265e28"} {"level":"info","ts":"2026-07-24T15:13:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"165f56966fce28cfdb6d60ad2e0198e3638e4857a25c2ba3d30e29096006c671","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:13:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cac0d1ed8c9ebc34639a723d1de883cd26d05c7a3fb8fe0f74efda5642dff75a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:13:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:13:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cac0d1ed8c9ebc34639a723d1de883cd26d05c7a3fb8fe0f74efda5642dff75a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:13:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/165f56966fce28cfdb6d60ad2e0198e3638e4857a25c2ba3d30e29096006c671"} {"level":"info","ts":"2026-07-24T15:13:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cac0d1ed8c9ebc34639a723d1de883cd26d05c7a3fb8fe0f74efda5642dff75a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:13:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec52c6d3b8a955cc3a1d7369130807518bdb644b303ee7de4d3dd709211ca4f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:13:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70457a4997d89ab3bd4e8054dcad44c81fd895c75e00128e2cd4439ddb265e28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:13:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"165f56966fce28cfdb6d60ad2e0198e3638e4857a25c2ba3d30e29096006c671","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:13:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cac0d1ed8c9ebc34639a723d1de883cd26d05c7a3fb8fe0f74efda5642dff75a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:13:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:13:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:13:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cac0d1ed8c9ebc34639a723d1de883cd26d05c7a3fb8fe0f74efda5642dff75a"} {"level":"info","ts":"2026-07-24T15:13:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cac0d1ed8c9ebc34639a723d1de883cd26d05c7a3fb8fe0f74efda5642dff75a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:13:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cac0d1ed8c9ebc34639a723d1de883cd26d05c7a3fb8fe0f74efda5642dff75a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:13:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:13:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cac0d1ed8c9ebc34639a723d1de883cd26d05c7a3fb8fe0f74efda5642dff75a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:13:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cac0d1ed8c9ebc34639a723d1de883cd26d05c7a3fb8fe0f74efda5642dff75a"} {"level":"info","ts":"2026-07-24T15:13:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cac0d1ed8c9ebc34639a723d1de883cd26d05c7a3fb8fe0f74efda5642dff75a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:13:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cac0d1ed8c9ebc34639a723d1de883cd26d05c7a3fb8fe0f74efda5642dff75a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:13:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:13:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cac0d1ed8c9ebc34639a723d1de883cd26d05c7a3fb8fe0f74efda5642dff75a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:13:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cac0d1ed8c9ebc34639a723d1de883cd26d05c7a3fb8fe0f74efda5642dff75a"} {"level":"error","ts":"2026-07-24T15:13:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"cac0d1ed8c9ebc34639a723d1de883cd26d05c7a3fb8fe0f74efda5642dff75a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"cac0d1ed8c9ebc34639a723d1de883cd26d05c7a3fb8fe0f74efda5642dff75a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T15:13:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cac0d1ed8c9ebc34639a723d1de883cd26d05c7a3fb8fe0f74efda5642dff75a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:13:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cac0d1ed8c9ebc34639a723d1de883cd26d05c7a3fb8fe0f74efda5642dff75a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T15:13:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f20e4042-cde4-4ff2-ba4a-b5df1906c247","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:50668","PortSpecifier":{"PortValue":50668}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f20e4042-cde4-4ff2-ba4a-b5df1906c247","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-dc7d81.apps.3be3295e-9019-4b6b-9df8-99ce19d48613.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T15:13:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f20e4042-cde4-4ff2-ba4a-b5df1906c247","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:50668","PortSpecifier":{"PortValue":50668}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784906012,"nanos":999701282},"http":{"id":"f20e4042-cde4-4ff2-ba4a-b5df1906c247","method":"POST","headers":{":authority":"e2e-shared-a-dc7d81.apps.3be3295e-9019-4b6b-9df8-99ce19d48613.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T15:13:33Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f20e4042-cde4-4ff2-ba4a-b5df1906c247","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T15:13:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f20e4042-cde4-4ff2-ba4a-b5df1906c247","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e9103260-9a05-4d99-8fa1-24683f35cf9c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac7166a7-f0ef-4ddf-98c5-a70fe2accb13"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/99ce19d48613"]}} {"level":"debug","ts":"2026-07-24T15:13:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f20e4042-cde4-4ff2-ba4a-b5df1906c247","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/99ce19d48613"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac7166a7-f0ef-4ddf-98c5-a70fe2accb13"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e9103260-9a05-4d99-8fa1-24683f35cf9c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"09bae11e466c1b7fd4a4390697823bdeb809c77799dcbe3c253ff8186111edd5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.73:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-dc7d81.apps.3be3295e-9019-4b6b-9df8-99ce19d48613.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T15:13:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f20e4042-cde4-4ff2-ba4a-b5df1906c247","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T15:13:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f20e4042-cde4-4ff2-ba4a-b5df1906c247","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T15:13:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f20e4042-cde4-4ff2-ba4a-b5df1906c247","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-dc7d81/auth-test-model-dc7d81\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-dc7d81/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T15:13:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f20e4042-cde4-4ff2-ba4a-b5df1906c247","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T15:13:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f20e4042-cde4-4ff2-ba4a-b5df1906c247","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T15:13:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f20e4042-cde4-4ff2-ba4a-b5df1906c247","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-24T15:13:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f20e4042-cde4-4ff2-ba4a-b5df1906c247","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T15:13:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f20e4042-cde4-4ff2-ba4a-b5df1906c247","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T15:13:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"808c23ff-873a-4e21-a7e2-3f1febd769cc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:56840","PortSpecifier":{"PortValue":56840}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"808c23ff-873a-4e21-a7e2-3f1febd769cc","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-8ea489.apps.3be3295e-9019-4b6b-9df8-99ce19d48613.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T15:13:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"808c23ff-873a-4e21-a7e2-3f1febd769cc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:56840","PortSpecifier":{"PortValue":56840}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784906013,"nanos":36384731},"http":{"id":"808c23ff-873a-4e21-a7e2-3f1febd769cc","method":"POST","headers":{":authority":"e2e-shared-b-8ea489.apps.3be3295e-9019-4b6b-9df8-99ce19d48613.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T15:13:33Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"808c23ff-873a-4e21-a7e2-3f1febd769cc","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T15:13:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"808c23ff-873a-4e21-a7e2-3f1febd769cc","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e9103260-9a05-4d99-8fa1-24683f35cf9c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac7166a7-f0ef-4ddf-98c5-a70fe2accb13"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/99ce19d48613"]}} {"level":"debug","ts":"2026-07-24T15:13:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"808c23ff-873a-4e21-a7e2-3f1febd769cc","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/99ce19d48613"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac7166a7-f0ef-4ddf-98c5-a70fe2accb13"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e9103260-9a05-4d99-8fa1-24683f35cf9c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3c418244c8795aafcaa38df340a22943da5e6dc77f4f8c2d142afad2a76c0fc8"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.76:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-8ea489.apps.3be3295e-9019-4b6b-9df8-99ce19d48613.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T15:13:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"808c23ff-873a-4e21-a7e2-3f1febd769cc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T15:13:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"808c23ff-873a-4e21-a7e2-3f1febd769cc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T15:13:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"808c23ff-873a-4e21-a7e2-3f1febd769cc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-8ea489/auth-test-model-8ea489\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-8ea489/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T15:13:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"808c23ff-873a-4e21-a7e2-3f1febd769cc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T15:13:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"808c23ff-873a-4e21-a7e2-3f1febd769cc","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T15:13:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"808c23ff-873a-4e21-a7e2-3f1febd769cc","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-24T15:13:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"808c23ff-873a-4e21-a7e2-3f1febd769cc","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T15:13:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"808c23ff-873a-4e21-a7e2-3f1febd769cc","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T15:13:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"423bd514-c83b-4dca-af5e-920c46a992f1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:50678","PortSpecifier":{"PortValue":50678}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"423bd514-c83b-4dca-af5e-920c46a992f1","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-dc7d81.apps.3be3295e-9019-4b6b-9df8-99ce19d48613.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T15:13:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"423bd514-c83b-4dca-af5e-920c46a992f1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:50678","PortSpecifier":{"PortValue":50678}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784906013,"nanos":77362734},"http":{"id":"423bd514-c83b-4dca-af5e-920c46a992f1","method":"POST","headers":{":authority":"e2e-shared-a-dc7d81.apps.3be3295e-9019-4b6b-9df8-99ce19d48613.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T15:13:33Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"423bd514-c83b-4dca-af5e-920c46a992f1","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T15:13:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"423bd514-c83b-4dca-af5e-920c46a992f1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e9103260-9a05-4d99-8fa1-24683f35cf9c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac7166a7-f0ef-4ddf-98c5-a70fe2accb13"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/99ce19d48613"]}} {"level":"debug","ts":"2026-07-24T15:13:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"423bd514-c83b-4dca-af5e-920c46a992f1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/99ce19d48613"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac7166a7-f0ef-4ddf-98c5-a70fe2accb13"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e9103260-9a05-4d99-8fa1-24683f35cf9c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"09bae11e466c1b7fd4a4390697823bdeb809c77799dcbe3c253ff8186111edd5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.73:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-dc7d81.apps.3be3295e-9019-4b6b-9df8-99ce19d48613.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T15:13:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"423bd514-c83b-4dca-af5e-920c46a992f1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T15:13:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"423bd514-c83b-4dca-af5e-920c46a992f1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T15:13:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"423bd514-c83b-4dca-af5e-920c46a992f1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-dc7d81/auth-test-model-dc7d81\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-dc7d81/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T15:13:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"423bd514-c83b-4dca-af5e-920c46a992f1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T15:13:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"423bd514-c83b-4dca-af5e-920c46a992f1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T15:13:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"423bd514-c83b-4dca-af5e-920c46a992f1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-24T15:13:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"423bd514-c83b-4dca-af5e-920c46a992f1","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T15:13:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"423bd514-c83b-4dca-af5e-920c46a992f1","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T15:13:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f548a1ab-88f5-4ec4-85d1-79fc46e34434","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:56846","PortSpecifier":{"PortValue":56846}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f548a1ab-88f5-4ec4-85d1-79fc46e34434","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-8ea489.apps.3be3295e-9019-4b6b-9df8-99ce19d48613.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T15:13:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f548a1ab-88f5-4ec4-85d1-79fc46e34434","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:56846","PortSpecifier":{"PortValue":56846}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784906013,"nanos":114779822},"http":{"id":"f548a1ab-88f5-4ec4-85d1-79fc46e34434","method":"POST","headers":{":authority":"e2e-shared-b-8ea489.apps.3be3295e-9019-4b6b-9df8-99ce19d48613.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T15:13:33Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f548a1ab-88f5-4ec4-85d1-79fc46e34434","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T15:13:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f548a1ab-88f5-4ec4-85d1-79fc46e34434","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e9103260-9a05-4d99-8fa1-24683f35cf9c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac7166a7-f0ef-4ddf-98c5-a70fe2accb13"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/99ce19d48613"]}} {"level":"debug","ts":"2026-07-24T15:13:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f548a1ab-88f5-4ec4-85d1-79fc46e34434","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/99ce19d48613"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac7166a7-f0ef-4ddf-98c5-a70fe2accb13"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e9103260-9a05-4d99-8fa1-24683f35cf9c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3c418244c8795aafcaa38df340a22943da5e6dc77f4f8c2d142afad2a76c0fc8"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.76:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-8ea489.apps.3be3295e-9019-4b6b-9df8-99ce19d48613.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T15:13:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f548a1ab-88f5-4ec4-85d1-79fc46e34434","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T15:13:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f548a1ab-88f5-4ec4-85d1-79fc46e34434","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T15:13:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f548a1ab-88f5-4ec4-85d1-79fc46e34434","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-8ea489/auth-test-model-8ea489\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-8ea489/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T15:13:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f548a1ab-88f5-4ec4-85d1-79fc46e34434","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T15:13:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f548a1ab-88f5-4ec4-85d1-79fc46e34434","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T15:13:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f548a1ab-88f5-4ec4-85d1-79fc46e34434","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-24T15:13:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f548a1ab-88f5-4ec4-85d1-79fc46e34434","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T15:13:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f548a1ab-88f5-4ec4-85d1-79fc46e34434","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T15:13:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ec52c6d3b8a955cc3a1d7369130807518bdb644b303ee7de4d3dd709211ca4f7"} {"level":"info","ts":"2026-07-24T15:13:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/30e3b2e24610402717b46509ada91e36cb1b724aa3f04b3a914c4a2c756f18d3"} {"level":"info","ts":"2026-07-24T15:13:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/165f56966fce28cfdb6d60ad2e0198e3638e4857a25c2ba3d30e29096006c671"} {"level":"info","ts":"2026-07-24T15:13:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3c418244c8795aafcaa38df340a22943da5e6dc77f4f8c2d142afad2a76c0fc8"} {"level":"info","ts":"2026-07-24T15:13:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4ee619cf5aa6d754279964d8d8f473db1f50d8e1495f68989618f40376820fc2"} {"level":"info","ts":"2026-07-24T15:13:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b63e986f099db6dded059b613fdc61522ac42647ee6624458f88a0fe4a80b4c6"} {"level":"info","ts":"2026-07-24T15:13:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cac0d1ed8c9ebc34639a723d1de883cd26d05c7a3fb8fe0f74efda5642dff75a"} {"level":"info","ts":"2026-07-24T15:13:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9"} {"level":"info","ts":"2026-07-24T15:13:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8f44c6c031674a913bd85e8bd1af1f32895d3667a167cb59926a1f9914090901"} {"level":"info","ts":"2026-07-24T15:13:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ff959bfe71f7cbfe05d8cb9ede8282650d0cc5dd7e5e6631f5c5157be9609bcc"} {"level":"info","ts":"2026-07-24T15:13:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/55a5d4ab21bb36f7f40978ce640f1e48428a71b01d8a07eff1fd4260ceb86991"} {"level":"info","ts":"2026-07-24T15:13:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/70457a4997d89ab3bd4e8054dcad44c81fd895c75e00128e2cd4439ddb265e28"} {"level":"debug","ts":"2026-07-24T15:13:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b63e986f099db6dded059b613fdc61522ac42647ee6624458f88a0fe4a80b4c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:13:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:13:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:13:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b63e986f099db6dded059b613fdc61522ac42647ee6624458f88a0fe4a80b4c6"} {"level":"info","ts":"2026-07-24T15:13:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b63e986f099db6dded059b613fdc61522ac42647ee6624458f88a0fe4a80b4c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:13:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b63e986f099db6dded059b613fdc61522ac42647ee6624458f88a0fe4a80b4c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:13:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b63e986f099db6dded059b613fdc61522ac42647ee6624458f88a0fe4a80b4c6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T15:13:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b63e986f099db6dded059b613fdc61522ac42647ee6624458f88a0fe4a80b4c6"} {"level":"debug","ts":"2026-07-24T15:13:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b63e986f099db6dded059b613fdc61522ac42647ee6624458f88a0fe4a80b4c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:13:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:13:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b63e986f099db6dded059b613fdc61522ac42647ee6624458f88a0fe4a80b4c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:13:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b63e986f099db6dded059b613fdc61522ac42647ee6624458f88a0fe4a80b4c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:13:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b63e986f099db6dded059b613fdc61522ac42647ee6624458f88a0fe4a80b4c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:13:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:13:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:13:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b63e986f099db6dded059b613fdc61522ac42647ee6624458f88a0fe4a80b4c6"} {"level":"info","ts":"2026-07-24T15:13:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b63e986f099db6dded059b613fdc61522ac42647ee6624458f88a0fe4a80b4c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:13:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b63e986f099db6dded059b613fdc61522ac42647ee6624458f88a0fe4a80b4c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:13:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b63e986f099db6dded059b613fdc61522ac42647ee6624458f88a0fe4a80b4c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:13:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b63e986f099db6dded059b613fdc61522ac42647ee6624458f88a0fe4a80b4c6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T15:13:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b63e986f099db6dded059b613fdc61522ac42647ee6624458f88a0fe4a80b4c6"} {"level":"debug","ts":"2026-07-24T15:13:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b63e986f099db6dded059b613fdc61522ac42647ee6624458f88a0fe4a80b4c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:13:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:13:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b63e986f099db6dded059b613fdc61522ac42647ee6624458f88a0fe4a80b4c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:13:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b63e986f099db6dded059b613fdc61522ac42647ee6624458f88a0fe4a80b4c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:13:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b63e986f099db6dded059b613fdc61522ac42647ee6624458f88a0fe4a80b4c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:13:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:13:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:13:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b63e986f099db6dded059b613fdc61522ac42647ee6624458f88a0fe4a80b4c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:13:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30e3b2e24610402717b46509ada91e36cb1b724aa3f04b3a914c4a2c756f18d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:13:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:13:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:13:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b63e986f099db6dded059b613fdc61522ac42647ee6624458f88a0fe4a80b4c6"} {"level":"info","ts":"2026-07-24T15:13:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30e3b2e24610402717b46509ada91e36cb1b724aa3f04b3a914c4a2c756f18d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:13:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b63e986f099db6dded059b613fdc61522ac42647ee6624458f88a0fe4a80b4c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:13:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:13:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b63e986f099db6dded059b613fdc61522ac42647ee6624458f88a0fe4a80b4c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:13:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30e3b2e24610402717b46509ada91e36cb1b724aa3f04b3a914c4a2c756f18d3"} {"level":"info","ts":"2026-07-24T15:13:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b63e986f099db6dded059b613fdc61522ac42647ee6624458f88a0fe4a80b4c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:13:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30e3b2e24610402717b46509ada91e36cb1b724aa3f04b3a914c4a2c756f18d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:13:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:13:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["30e3b2e24610402717b46509ada91e36cb1b724aa3f04b3a914c4a2c756f18d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:13:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b63e986f099db6dded059b613fdc61522ac42647ee6624458f88a0fe4a80b4c6"} {"level":"info","ts":"2026-07-24T15:13:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30e3b2e24610402717b46509ada91e36cb1b724aa3f04b3a914c4a2c756f18d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:13:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b63e986f099db6dded059b613fdc61522ac42647ee6624458f88a0fe4a80b4c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:13:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30e3b2e24610402717b46509ada91e36cb1b724aa3f04b3a914c4a2c756f18d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:13:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:13:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:13:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30e3b2e24610402717b46509ada91e36cb1b724aa3f04b3a914c4a2c756f18d3"} {"level":"info","ts":"2026-07-24T15:13:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30e3b2e24610402717b46509ada91e36cb1b724aa3f04b3a914c4a2c756f18d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:13:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30e3b2e24610402717b46509ada91e36cb1b724aa3f04b3a914c4a2c756f18d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:13:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:13:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["30e3b2e24610402717b46509ada91e36cb1b724aa3f04b3a914c4a2c756f18d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:13:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b63e986f099db6dded059b613fdc61522ac42647ee6624458f88a0fe4a80b4c6"} {"level":"info","ts":"2026-07-24T15:13:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30e3b2e24610402717b46509ada91e36cb1b724aa3f04b3a914c4a2c756f18d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:13:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30e3b2e24610402717b46509ada91e36cb1b724aa3f04b3a914c4a2c756f18d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:13:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30e3b2e24610402717b46509ada91e36cb1b724aa3f04b3a914c4a2c756f18d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:13:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:13:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:13:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30e3b2e24610402717b46509ada91e36cb1b724aa3f04b3a914c4a2c756f18d3"} {"level":"info","ts":"2026-07-24T15:13:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30e3b2e24610402717b46509ada91e36cb1b724aa3f04b3a914c4a2c756f18d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:13:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30e3b2e24610402717b46509ada91e36cb1b724aa3f04b3a914c4a2c756f18d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:13:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:13:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:13:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30e3b2e24610402717b46509ada91e36cb1b724aa3f04b3a914c4a2c756f18d3"} {"level":"error","ts":"2026-07-24T15:13:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"30e3b2e24610402717b46509ada91e36cb1b724aa3f04b3a914c4a2c756f18d3","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"30e3b2e24610402717b46509ada91e36cb1b724aa3f04b3a914c4a2c756f18d3\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T15:13:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30e3b2e24610402717b46509ada91e36cb1b724aa3f04b3a914c4a2c756f18d3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T15:13:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30e3b2e24610402717b46509ada91e36cb1b724aa3f04b3a914c4a2c756f18d3"} {"level":"debug","ts":"2026-07-24T15:13:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30e3b2e24610402717b46509ada91e36cb1b724aa3f04b3a914c4a2c756f18d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:13:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:13:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["30e3b2e24610402717b46509ada91e36cb1b724aa3f04b3a914c4a2c756f18d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:13:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30e3b2e24610402717b46509ada91e36cb1b724aa3f04b3a914c4a2c756f18d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:13:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30e3b2e24610402717b46509ada91e36cb1b724aa3f04b3a914c4a2c756f18d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:13:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:13:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:13:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30e3b2e24610402717b46509ada91e36cb1b724aa3f04b3a914c4a2c756f18d3"} {"level":"info","ts":"2026-07-24T15:13:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30e3b2e24610402717b46509ada91e36cb1b724aa3f04b3a914c4a2c756f18d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:13:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cac0d1ed8c9ebc34639a723d1de883cd26d05c7a3fb8fe0f74efda5642dff75a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:13:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:13:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:13:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cac0d1ed8c9ebc34639a723d1de883cd26d05c7a3fb8fe0f74efda5642dff75a"} {"level":"info","ts":"2026-07-24T15:13:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cac0d1ed8c9ebc34639a723d1de883cd26d05c7a3fb8fe0f74efda5642dff75a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:13:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30e3b2e24610402717b46509ada91e36cb1b724aa3f04b3a914c4a2c756f18d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:13:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cac0d1ed8c9ebc34639a723d1de883cd26d05c7a3fb8fe0f74efda5642dff75a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:13:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:13:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cac0d1ed8c9ebc34639a723d1de883cd26d05c7a3fb8fe0f74efda5642dff75a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30e3b2e24610402717b46509ada91e36cb1b724aa3f04b3a914c4a2c756f18d3"} {"level":"info","ts":"2026-07-24T15:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cac0d1ed8c9ebc34639a723d1de883cd26d05c7a3fb8fe0f74efda5642dff75a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30e3b2e24610402717b46509ada91e36cb1b724aa3f04b3a914c4a2c756f18d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:13:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:13:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["30e3b2e24610402717b46509ada91e36cb1b724aa3f04b3a914c4a2c756f18d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cac0d1ed8c9ebc34639a723d1de883cd26d05c7a3fb8fe0f74efda5642dff75a"} {"level":"info","ts":"2026-07-24T15:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30e3b2e24610402717b46509ada91e36cb1b724aa3f04b3a914c4a2c756f18d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cac0d1ed8c9ebc34639a723d1de883cd26d05c7a3fb8fe0f74efda5642dff75a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:13:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:13:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cac0d1ed8c9ebc34639a723d1de883cd26d05c7a3fb8fe0f74efda5642dff75a"} {"level":"info","ts":"2026-07-24T15:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cac0d1ed8c9ebc34639a723d1de883cd26d05c7a3fb8fe0f74efda5642dff75a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30e3b2e24610402717b46509ada91e36cb1b724aa3f04b3a914c4a2c756f18d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:13:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:13:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30e3b2e24610402717b46509ada91e36cb1b724aa3f04b3a914c4a2c756f18d3"} {"level":"info","ts":"2026-07-24T15:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30e3b2e24610402717b46509ada91e36cb1b724aa3f04b3a914c4a2c756f18d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cac0d1ed8c9ebc34639a723d1de883cd26d05c7a3fb8fe0f74efda5642dff75a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30e3b2e24610402717b46509ada91e36cb1b724aa3f04b3a914c4a2c756f18d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:13:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:13:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["30e3b2e24610402717b46509ada91e36cb1b724aa3f04b3a914c4a2c756f18d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30e3b2e24610402717b46509ada91e36cb1b724aa3f04b3a914c4a2c756f18d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cac0d1ed8c9ebc34639a723d1de883cd26d05c7a3fb8fe0f74efda5642dff75a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30e3b2e24610402717b46509ada91e36cb1b724aa3f04b3a914c4a2c756f18d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:13:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:13:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["30e3b2e24610402717b46509ada91e36cb1b724aa3f04b3a914c4a2c756f18d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cac0d1ed8c9ebc34639a723d1de883cd26d05c7a3fb8fe0f74efda5642dff75a"} {"level":"error","ts":"2026-07-24T15:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"30e3b2e24610402717b46509ada91e36cb1b724aa3f04b3a914c4a2c756f18d3","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"30e3b2e24610402717b46509ada91e36cb1b724aa3f04b3a914c4a2c756f18d3\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T15:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30e3b2e24610402717b46509ada91e36cb1b724aa3f04b3a914c4a2c756f18d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:13:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:13:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30e3b2e24610402717b46509ada91e36cb1b724aa3f04b3a914c4a2c756f18d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cac0d1ed8c9ebc34639a723d1de883cd26d05c7a3fb8fe0f74efda5642dff75a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:13:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:13:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cac0d1ed8c9ebc34639a723d1de883cd26d05c7a3fb8fe0f74efda5642dff75a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30e3b2e24610402717b46509ada91e36cb1b724aa3f04b3a914c4a2c756f18d3"} {"level":"info","ts":"2026-07-24T15:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cac0d1ed8c9ebc34639a723d1de883cd26d05c7a3fb8fe0f74efda5642dff75a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30e3b2e24610402717b46509ada91e36cb1b724aa3f04b3a914c4a2c756f18d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55a5d4ab21bb36f7f40978ce640f1e48428a71b01d8a07eff1fd4260ceb86991","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:13:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:13:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30e3b2e24610402717b46509ada91e36cb1b724aa3f04b3a914c4a2c756f18d3"} {"level":"info","ts":"2026-07-24T15:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55a5d4ab21bb36f7f40978ce640f1e48428a71b01d8a07eff1fd4260ceb86991"} {"level":"info","ts":"2026-07-24T15:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55a5d4ab21bb36f7f40978ce640f1e48428a71b01d8a07eff1fd4260ceb86991","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cac0d1ed8c9ebc34639a723d1de883cd26d05c7a3fb8fe0f74efda5642dff75a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:13:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:13:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cac0d1ed8c9ebc34639a723d1de883cd26d05c7a3fb8fe0f74efda5642dff75a"} {"level":"info","ts":"2026-07-24T15:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cac0d1ed8c9ebc34639a723d1de883cd26d05c7a3fb8fe0f74efda5642dff75a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30e3b2e24610402717b46509ada91e36cb1b724aa3f04b3a914c4a2c756f18d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:13:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:13:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["30e3b2e24610402717b46509ada91e36cb1b724aa3f04b3a914c4a2c756f18d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55a5d4ab21bb36f7f40978ce640f1e48428a71b01d8a07eff1fd4260ceb86991"} {"level":"info","ts":"2026-07-24T15:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30e3b2e24610402717b46509ada91e36cb1b724aa3f04b3a914c4a2c756f18d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55a5d4ab21bb36f7f40978ce640f1e48428a71b01d8a07eff1fd4260ceb86991","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:13:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:13:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["55a5d4ab21bb36f7f40978ce640f1e48428a71b01d8a07eff1fd4260ceb86991"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cac0d1ed8c9ebc34639a723d1de883cd26d05c7a3fb8fe0f74efda5642dff75a"} {"level":"info","ts":"2026-07-24T15:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55a5d4ab21bb36f7f40978ce640f1e48428a71b01d8a07eff1fd4260ceb86991","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cac0d1ed8c9ebc34639a723d1de883cd26d05c7a3fb8fe0f74efda5642dff75a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:13:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:13:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cac0d1ed8c9ebc34639a723d1de883cd26d05c7a3fb8fe0f74efda5642dff75a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9"} {"level":"info","ts":"2026-07-24T15:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cac0d1ed8c9ebc34639a723d1de883cd26d05c7a3fb8fe0f74efda5642dff75a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:13:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:13:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30e3b2e24610402717b46509ada91e36cb1b724aa3f04b3a914c4a2c756f18d3"} {"level":"info","ts":"2026-07-24T15:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30e3b2e24610402717b46509ada91e36cb1b724aa3f04b3a914c4a2c756f18d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55a5d4ab21bb36f7f40978ce640f1e48428a71b01d8a07eff1fd4260ceb86991","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:13:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:13:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55a5d4ab21bb36f7f40978ce640f1e48428a71b01d8a07eff1fd4260ceb86991"} {"level":"info","ts":"2026-07-24T15:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55a5d4ab21bb36f7f40978ce640f1e48428a71b01d8a07eff1fd4260ceb86991","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cac0d1ed8c9ebc34639a723d1de883cd26d05c7a3fb8fe0f74efda5642dff75a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:13:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:13:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cac0d1ed8c9ebc34639a723d1de883cd26d05c7a3fb8fe0f74efda5642dff75a"} {"level":"info","ts":"2026-07-24T15:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cac0d1ed8c9ebc34639a723d1de883cd26d05c7a3fb8fe0f74efda5642dff75a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:13:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:13:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9"} {"level":"info","ts":"2026-07-24T15:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff959bfe71f7cbfe05d8cb9ede8282650d0cc5dd7e5e6631f5c5157be9609bcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:13:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:13:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff959bfe71f7cbfe05d8cb9ede8282650d0cc5dd7e5e6631f5c5157be9609bcc"} {"level":"info","ts":"2026-07-24T15:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55a5d4ab21bb36f7f40978ce640f1e48428a71b01d8a07eff1fd4260ceb86991"} {"level":"info","ts":"2026-07-24T15:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff959bfe71f7cbfe05d8cb9ede8282650d0cc5dd7e5e6631f5c5157be9609bcc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55a5d4ab21bb36f7f40978ce640f1e48428a71b01d8a07eff1fd4260ceb86991","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:13:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:13:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["55a5d4ab21bb36f7f40978ce640f1e48428a71b01d8a07eff1fd4260ceb86991"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cac0d1ed8c9ebc34639a723d1de883cd26d05c7a3fb8fe0f74efda5642dff75a"} {"level":"info","ts":"2026-07-24T15:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55a5d4ab21bb36f7f40978ce640f1e48428a71b01d8a07eff1fd4260ceb86991","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cac0d1ed8c9ebc34639a723d1de883cd26d05c7a3fb8fe0f74efda5642dff75a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:13:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:13:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cac0d1ed8c9ebc34639a723d1de883cd26d05c7a3fb8fe0f74efda5642dff75a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9"} {"level":"info","ts":"2026-07-24T15:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cac0d1ed8c9ebc34639a723d1de883cd26d05c7a3fb8fe0f74efda5642dff75a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:13:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:13:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff959bfe71f7cbfe05d8cb9ede8282650d0cc5dd7e5e6631f5c5157be9609bcc"} {"level":"info","ts":"2026-07-24T15:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff959bfe71f7cbfe05d8cb9ede8282650d0cc5dd7e5e6631f5c5157be9609bcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:13:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:13:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ff959bfe71f7cbfe05d8cb9ede8282650d0cc5dd7e5e6631f5c5157be9609bcc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55a5d4ab21bb36f7f40978ce640f1e48428a71b01d8a07eff1fd4260ceb86991"} {"level":"info","ts":"2026-07-24T15:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff959bfe71f7cbfe05d8cb9ede8282650d0cc5dd7e5e6631f5c5157be9609bcc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55a5d4ab21bb36f7f40978ce640f1e48428a71b01d8a07eff1fd4260ceb86991","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70457a4997d89ab3bd4e8054dcad44c81fd895c75e00128e2cd4439ddb265e28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:13:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:13:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70457a4997d89ab3bd4e8054dcad44c81fd895c75e00128e2cd4439ddb265e28"} {"level":"info","ts":"2026-07-24T15:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cac0d1ed8c9ebc34639a723d1de883cd26d05c7a3fb8fe0f74efda5642dff75a"} {"level":"info","ts":"2026-07-24T15:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70457a4997d89ab3bd4e8054dcad44c81fd895c75e00128e2cd4439ddb265e28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cac0d1ed8c9ebc34639a723d1de883cd26d05c7a3fb8fe0f74efda5642dff75a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec52c6d3b8a955cc3a1d7369130807518bdb644b303ee7de4d3dd709211ca4f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:13:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:13:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec52c6d3b8a955cc3a1d7369130807518bdb644b303ee7de4d3dd709211ca4f7"} {"level":"info","ts":"2026-07-24T15:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec52c6d3b8a955cc3a1d7369130807518bdb644b303ee7de4d3dd709211ca4f7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T15:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9"} {"level":"debug","ts":"2026-07-24T15:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:13:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:13:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff959bfe71f7cbfe05d8cb9ede8282650d0cc5dd7e5e6631f5c5157be9609bcc"} {"level":"info","ts":"2026-07-24T15:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff959bfe71f7cbfe05d8cb9ede8282650d0cc5dd7e5e6631f5c5157be9609bcc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70457a4997d89ab3bd4e8054dcad44c81fd895c75e00128e2cd4439ddb265e28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"165f56966fce28cfdb6d60ad2e0198e3638e4857a25c2ba3d30e29096006c671","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:13:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:13:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70457a4997d89ab3bd4e8054dcad44c81fd895c75e00128e2cd4439ddb265e28"} {"level":"info","ts":"2026-07-24T15:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/165f56966fce28cfdb6d60ad2e0198e3638e4857a25c2ba3d30e29096006c671"} {"level":"info","ts":"2026-07-24T15:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"165f56966fce28cfdb6d60ad2e0198e3638e4857a25c2ba3d30e29096006c671","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec52c6d3b8a955cc3a1d7369130807518bdb644b303ee7de4d3dd709211ca4f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:13:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:13:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec52c6d3b8a955cc3a1d7369130807518bdb644b303ee7de4d3dd709211ca4f7"} {"level":"info","ts":"2026-07-24T15:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70457a4997d89ab3bd4e8054dcad44c81fd895c75e00128e2cd4439ddb265e28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:13:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:13:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["70457a4997d89ab3bd4e8054dcad44c81fd895c75e00128e2cd4439ddb265e28"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9"} {"level":"info","ts":"2026-07-24T15:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f44c6c031674a913bd85e8bd1af1f32895d3667a167cb59926a1f9914090901"} {"level":"info","ts":"2026-07-24T15:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70457a4997d89ab3bd4e8054dcad44c81fd895c75e00128e2cd4439ddb265e28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f44c6c031674a913bd85e8bd1af1f32895d3667a167cb59926a1f9914090901","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:13:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:13:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8f44c6c031674a913bd85e8bd1af1f32895d3667a167cb59926a1f9914090901"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/165f56966fce28cfdb6d60ad2e0198e3638e4857a25c2ba3d30e29096006c671"} {"level":"info","ts":"2026-07-24T15:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f44c6c031674a913bd85e8bd1af1f32895d3667a167cb59926a1f9914090901","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"165f56966fce28cfdb6d60ad2e0198e3638e4857a25c2ba3d30e29096006c671","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:13:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:13:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["165f56966fce28cfdb6d60ad2e0198e3638e4857a25c2ba3d30e29096006c671"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c418244c8795aafcaa38df340a22943da5e6dc77f4f8c2d142afad2a76c0fc8"} {"level":"info","ts":"2026-07-24T15:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9"} {"level":"info","ts":"2026-07-24T15:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"165f56966fce28cfdb6d60ad2e0198e3638e4857a25c2ba3d30e29096006c671","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c418244c8795aafcaa38df340a22943da5e6dc77f4f8c2d142afad2a76c0fc8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:13:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:13:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c418244c8795aafcaa38df340a22943da5e6dc77f4f8c2d142afad2a76c0fc8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70457a4997d89ab3bd4e8054dcad44c81fd895c75e00128e2cd4439ddb265e28"} {"level":"info","ts":"2026-07-24T15:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c418244c8795aafcaa38df340a22943da5e6dc77f4f8c2d142afad2a76c0fc8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec52c6d3b8a955cc3a1d7369130807518bdb644b303ee7de4d3dd709211ca4f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:13:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:13:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec52c6d3b8a955cc3a1d7369130807518bdb644b303ee7de4d3dd709211ca4f7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f44c6c031674a913bd85e8bd1af1f32895d3667a167cb59926a1f9914090901"} {"level":"info","ts":"2026-07-24T15:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec52c6d3b8a955cc3a1d7369130807518bdb644b303ee7de4d3dd709211ca4f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70457a4997d89ab3bd4e8054dcad44c81fd895c75e00128e2cd4439ddb265e28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f44c6c031674a913bd85e8bd1af1f32895d3667a167cb59926a1f9914090901","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ee619cf5aa6d754279964d8d8f473db1f50d8e1495f68989618f40376820fc2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:13:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:13:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ee619cf5aa6d754279964d8d8f473db1f50d8e1495f68989618f40376820fc2"} {"level":"info","ts":"2026-07-24T15:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ee619cf5aa6d754279964d8d8f473db1f50d8e1495f68989618f40376820fc2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"165f56966fce28cfdb6d60ad2e0198e3638e4857a25c2ba3d30e29096006c671","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:13:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:13:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/165f56966fce28cfdb6d60ad2e0198e3638e4857a25c2ba3d30e29096006c671"} {"level":"info","ts":"2026-07-24T15:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"165f56966fce28cfdb6d60ad2e0198e3638e4857a25c2ba3d30e29096006c671","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c418244c8795aafcaa38df340a22943da5e6dc77f4f8c2d142afad2a76c0fc8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:13:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:13:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c418244c8795aafcaa38df340a22943da5e6dc77f4f8c2d142afad2a76c0fc8"} {"level":"info","ts":"2026-07-24T15:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c418244c8795aafcaa38df340a22943da5e6dc77f4f8c2d142afad2a76c0fc8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec52c6d3b8a955cc3a1d7369130807518bdb644b303ee7de4d3dd709211ca4f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:13:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:13:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec52c6d3b8a955cc3a1d7369130807518bdb644b303ee7de4d3dd709211ca4f7"} {"level":"info","ts":"2026-07-24T15:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec52c6d3b8a955cc3a1d7369130807518bdb644b303ee7de4d3dd709211ca4f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ee619cf5aa6d754279964d8d8f473db1f50d8e1495f68989618f40376820fc2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"165f56966fce28cfdb6d60ad2e0198e3638e4857a25c2ba3d30e29096006c671","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:13:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:13:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["165f56966fce28cfdb6d60ad2e0198e3638e4857a25c2ba3d30e29096006c671"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ee619cf5aa6d754279964d8d8f473db1f50d8e1495f68989618f40376820fc2"} {"level":"info","ts":"2026-07-24T15:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"165f56966fce28cfdb6d60ad2e0198e3638e4857a25c2ba3d30e29096006c671","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c418244c8795aafcaa38df340a22943da5e6dc77f4f8c2d142afad2a76c0fc8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:13:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:13:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c418244c8795aafcaa38df340a22943da5e6dc77f4f8c2d142afad2a76c0fc8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/165f56966fce28cfdb6d60ad2e0198e3638e4857a25c2ba3d30e29096006c671"} {"level":"info","ts":"2026-07-24T15:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c418244c8795aafcaa38df340a22943da5e6dc77f4f8c2d142afad2a76c0fc8"} {"level":"info","ts":"2026-07-24T15:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c418244c8795aafcaa38df340a22943da5e6dc77f4f8c2d142afad2a76c0fc8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec52c6d3b8a955cc3a1d7369130807518bdb644b303ee7de4d3dd709211ca4f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ee619cf5aa6d754279964d8d8f473db1f50d8e1495f68989618f40376820fc2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:13:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:13:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4ee619cf5aa6d754279964d8d8f473db1f50d8e1495f68989618f40376820fc2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ee619cf5aa6d754279964d8d8f473db1f50d8e1495f68989618f40376820fc2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"165f56966fce28cfdb6d60ad2e0198e3638e4857a25c2ba3d30e29096006c671","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c418244c8795aafcaa38df340a22943da5e6dc77f4f8c2d142afad2a76c0fc8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec52c6d3b8a955cc3a1d7369130807518bdb644b303ee7de4d3dd709211ca4f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ee619cf5aa6d754279964d8d8f473db1f50d8e1495f68989618f40376820fc2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T15:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec52c6d3b8a955cc3a1d7369130807518bdb644b303ee7de4d3dd709211ca4f7"} {"level":"debug","ts":"2026-07-24T15:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec52c6d3b8a955cc3a1d7369130807518bdb644b303ee7de4d3dd709211ca4f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:13:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:13:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec52c6d3b8a955cc3a1d7369130807518bdb644b303ee7de4d3dd709211ca4f7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/165f56966fce28cfdb6d60ad2e0198e3638e4857a25c2ba3d30e29096006c671"} {"level":"info","ts":"2026-07-24T15:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec52c6d3b8a955cc3a1d7369130807518bdb644b303ee7de4d3dd709211ca4f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec52c6d3b8a955cc3a1d7369130807518bdb644b303ee7de4d3dd709211ca4f7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T15:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c418244c8795aafcaa38df340a22943da5e6dc77f4f8c2d142afad2a76c0fc8"} {"level":"info","ts":"2026-07-24T15:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ee619cf5aa6d754279964d8d8f473db1f50d8e1495f68989618f40376820fc2"} {"level":"info","ts":"2026-07-24T15:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec52c6d3b8a955cc3a1d7369130807518bdb644b303ee7de4d3dd709211ca4f7"} {"level":"info","ts":"2026-07-24T15:13:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aa664a10-03d1-4810-b5c9-75d87b60aeb4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:37768","PortSpecifier":{"PortValue":37768}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"aa664a10-03d1-4810-b5c9-75d87b60aeb4","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-dc7d81.apps.3be3295e-9019-4b6b-9df8-99ce19d48613.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T15:13:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aa664a10-03d1-4810-b5c9-75d87b60aeb4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:37768","PortSpecifier":{"PortValue":37768}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784906039,"nanos":866082996},"http":{"id":"aa664a10-03d1-4810-b5c9-75d87b60aeb4","method":"POST","headers":{":authority":"e2e-shared-a-dc7d81.apps.3be3295e-9019-4b6b-9df8-99ce19d48613.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T15:13:59Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"aa664a10-03d1-4810-b5c9-75d87b60aeb4","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T15:13:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"aa664a10-03d1-4810-b5c9-75d87b60aeb4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e9103260-9a05-4d99-8fa1-24683f35cf9c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac7166a7-f0ef-4ddf-98c5-a70fe2accb13"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/99ce19d48613"]}} {"level":"debug","ts":"2026-07-24T15:13:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"aa664a10-03d1-4810-b5c9-75d87b60aeb4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/99ce19d48613"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac7166a7-f0ef-4ddf-98c5-a70fe2accb13"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e9103260-9a05-4d99-8fa1-24683f35cf9c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"09bae11e466c1b7fd4a4390697823bdeb809c77799dcbe3c253ff8186111edd5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.73:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-dc7d81.apps.3be3295e-9019-4b6b-9df8-99ce19d48613.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T15:13:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aa664a10-03d1-4810-b5c9-75d87b60aeb4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T15:13:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aa664a10-03d1-4810-b5c9-75d87b60aeb4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T15:13:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aa664a10-03d1-4810-b5c9-75d87b60aeb4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-dc7d81/auth-test-model-dc7d81\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-dc7d81/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T15:13:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"aa664a10-03d1-4810-b5c9-75d87b60aeb4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T15:13:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aa664a10-03d1-4810-b5c9-75d87b60aeb4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T15:13:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aa664a10-03d1-4810-b5c9-75d87b60aeb4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-24T15:13:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aa664a10-03d1-4810-b5c9-75d87b60aeb4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T15:13:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aa664a10-03d1-4810-b5c9-75d87b60aeb4","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T15:13:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1eac592a-4b1c-4e04-97b8-13f3f01795d2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:50242","PortSpecifier":{"PortValue":50242}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1eac592a-4b1c-4e04-97b8-13f3f01795d2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-8ea489.apps.3be3295e-9019-4b6b-9df8-99ce19d48613.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T15:13:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1eac592a-4b1c-4e04-97b8-13f3f01795d2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:50242","PortSpecifier":{"PortValue":50242}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784906039,"nanos":900227811},"http":{"id":"1eac592a-4b1c-4e04-97b8-13f3f01795d2","method":"POST","headers":{":authority":"e2e-shared-b-8ea489.apps.3be3295e-9019-4b6b-9df8-99ce19d48613.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T15:13:59Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1eac592a-4b1c-4e04-97b8-13f3f01795d2","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T15:13:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1eac592a-4b1c-4e04-97b8-13f3f01795d2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e9103260-9a05-4d99-8fa1-24683f35cf9c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac7166a7-f0ef-4ddf-98c5-a70fe2accb13"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/99ce19d48613"]}} {"level":"debug","ts":"2026-07-24T15:13:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1eac592a-4b1c-4e04-97b8-13f3f01795d2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/99ce19d48613"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac7166a7-f0ef-4ddf-98c5-a70fe2accb13"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e9103260-9a05-4d99-8fa1-24683f35cf9c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3c418244c8795aafcaa38df340a22943da5e6dc77f4f8c2d142afad2a76c0fc8"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.76:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-8ea489.apps.3be3295e-9019-4b6b-9df8-99ce19d48613.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T15:13:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1eac592a-4b1c-4e04-97b8-13f3f01795d2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T15:13:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1eac592a-4b1c-4e04-97b8-13f3f01795d2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T15:13:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1eac592a-4b1c-4e04-97b8-13f3f01795d2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-8ea489/auth-test-model-8ea489\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-8ea489/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T15:13:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1eac592a-4b1c-4e04-97b8-13f3f01795d2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T15:13:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1eac592a-4b1c-4e04-97b8-13f3f01795d2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T15:13:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1eac592a-4b1c-4e04-97b8-13f3f01795d2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-24T15:13:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1eac592a-4b1c-4e04-97b8-13f3f01795d2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T15:13:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1eac592a-4b1c-4e04-97b8-13f3f01795d2","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T15:13:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a67f9d34-df89-4730-a06d-7bc89ceb99cb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:50246","PortSpecifier":{"PortValue":50246}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a67f9d34-df89-4730-a06d-7bc89ceb99cb","method":"GET","path":"/maas-api/v1/api-keys/c76de5f3-5956-4602-aec1-a753da112091","host":"e2e-shared-b-8ea489.apps.3be3295e-9019-4b6b-9df8-99ce19d48613.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T15:13:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a67f9d34-df89-4730-a06d-7bc89ceb99cb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:50246","PortSpecifier":{"PortValue":50246}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784906039,"nanos":940178294},"http":{"id":"a67f9d34-df89-4730-a06d-7bc89ceb99cb","method":"GET","headers":{":authority":"e2e-shared-b-8ea489.apps.3be3295e-9019-4b6b-9df8-99ce19d48613.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/c76de5f3-5956-4602-aec1-a753da112091",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T15:13:59Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a67f9d34-df89-4730-a06d-7bc89ceb99cb","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T15:13:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a67f9d34-df89-4730-a06d-7bc89ceb99cb","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e9103260-9a05-4d99-8fa1-24683f35cf9c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac7166a7-f0ef-4ddf-98c5-a70fe2accb13"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/99ce19d48613"]}} {"level":"debug","ts":"2026-07-24T15:13:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a67f9d34-df89-4730-a06d-7bc89ceb99cb","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/99ce19d48613"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac7166a7-f0ef-4ddf-98c5-a70fe2accb13"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e9103260-9a05-4d99-8fa1-24683f35cf9c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3c418244c8795aafcaa38df340a22943da5e6dc77f4f8c2d142afad2a76c0fc8"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.76:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-8ea489.apps.3be3295e-9019-4b6b-9df8-99ce19d48613.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/c76de5f3-5956-4602-aec1-a753da112091",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T15:13:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a67f9d34-df89-4730-a06d-7bc89ceb99cb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T15:13:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a67f9d34-df89-4730-a06d-7bc89ceb99cb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T15:13:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a67f9d34-df89-4730-a06d-7bc89ceb99cb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-8ea489/auth-test-model-8ea489\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-8ea489/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T15:13:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a67f9d34-df89-4730-a06d-7bc89ceb99cb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T15:13:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a67f9d34-df89-4730-a06d-7bc89ceb99cb","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T15:13:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a67f9d34-df89-4730-a06d-7bc89ceb99cb","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-24T15:13:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a67f9d34-df89-4730-a06d-7bc89ceb99cb","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T15:13:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a67f9d34-df89-4730-a06d-7bc89ceb99cb","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T15:13:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1bc7bbc3-64be-4652-8f92-445fcb7649a6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:37780","PortSpecifier":{"PortValue":37780}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1bc7bbc3-64be-4652-8f92-445fcb7649a6","method":"GET","path":"/maas-api/v1/api-keys/c76de5f3-5956-4602-aec1-a753da112091","host":"e2e-shared-a-dc7d81.apps.3be3295e-9019-4b6b-9df8-99ce19d48613.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T15:13:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1bc7bbc3-64be-4652-8f92-445fcb7649a6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:37780","PortSpecifier":{"PortValue":37780}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784906039,"nanos":973512458},"http":{"id":"1bc7bbc3-64be-4652-8f92-445fcb7649a6","method":"GET","headers":{":authority":"e2e-shared-a-dc7d81.apps.3be3295e-9019-4b6b-9df8-99ce19d48613.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/c76de5f3-5956-4602-aec1-a753da112091",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T15:13:59Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1bc7bbc3-64be-4652-8f92-445fcb7649a6","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T15:13:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1bc7bbc3-64be-4652-8f92-445fcb7649a6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e9103260-9a05-4d99-8fa1-24683f35cf9c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac7166a7-f0ef-4ddf-98c5-a70fe2accb13"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/99ce19d48613"]}} {"level":"debug","ts":"2026-07-24T15:13:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1bc7bbc3-64be-4652-8f92-445fcb7649a6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/99ce19d48613"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac7166a7-f0ef-4ddf-98c5-a70fe2accb13"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e9103260-9a05-4d99-8fa1-24683f35cf9c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"09bae11e466c1b7fd4a4390697823bdeb809c77799dcbe3c253ff8186111edd5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.73:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-dc7d81.apps.3be3295e-9019-4b6b-9df8-99ce19d48613.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/c76de5f3-5956-4602-aec1-a753da112091",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T15:13:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1bc7bbc3-64be-4652-8f92-445fcb7649a6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T15:13:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1bc7bbc3-64be-4652-8f92-445fcb7649a6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T15:13:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1bc7bbc3-64be-4652-8f92-445fcb7649a6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-dc7d81/auth-test-model-dc7d81\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-dc7d81/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T15:13:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1bc7bbc3-64be-4652-8f92-445fcb7649a6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T15:13:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1bc7bbc3-64be-4652-8f92-445fcb7649a6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T15:13:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1bc7bbc3-64be-4652-8f92-445fcb7649a6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-24T15:13:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1bc7bbc3-64be-4652-8f92-445fcb7649a6","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T15:13:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1bc7bbc3-64be-4652-8f92-445fcb7649a6","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T15:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ec52c6d3b8a955cc3a1d7369130807518bdb644b303ee7de4d3dd709211ca4f7"} {"level":"info","ts":"2026-07-24T15:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ff959bfe71f7cbfe05d8cb9ede8282650d0cc5dd7e5e6631f5c5157be9609bcc"} {"level":"info","ts":"2026-07-24T15:14:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3c418244c8795aafcaa38df340a22943da5e6dc77f4f8c2d142afad2a76c0fc8"} {"level":"info","ts":"2026-07-24T15:14:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4ee619cf5aa6d754279964d8d8f473db1f50d8e1495f68989618f40376820fc2"} {"level":"info","ts":"2026-07-24T15:14:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8f44c6c031674a913bd85e8bd1af1f32895d3667a167cb59926a1f9914090901"} {"level":"info","ts":"2026-07-24T15:14:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cac0d1ed8c9ebc34639a723d1de883cd26d05c7a3fb8fe0f74efda5642dff75a"} {"level":"info","ts":"2026-07-24T15:14:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/30e3b2e24610402717b46509ada91e36cb1b724aa3f04b3a914c4a2c756f18d3"} {"level":"info","ts":"2026-07-24T15:14:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9"} {"level":"info","ts":"2026-07-24T15:14:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/70457a4997d89ab3bd4e8054dcad44c81fd895c75e00128e2cd4439ddb265e28"} {"level":"info","ts":"2026-07-24T15:14:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/165f56966fce28cfdb6d60ad2e0198e3638e4857a25c2ba3d30e29096006c671"} {"level":"info","ts":"2026-07-24T15:14:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/55a5d4ab21bb36f7f40978ce640f1e48428a71b01d8a07eff1fd4260ceb86991"} {"level":"info","ts":"2026-07-24T15:14:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b63e986f099db6dded059b613fdc61522ac42647ee6624458f88a0fe4a80b4c6"} {"level":"debug","ts":"2026-07-24T15:14:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cac0d1ed8c9ebc34639a723d1de883cd26d05c7a3fb8fe0f74efda5642dff75a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:14:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:14:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:14:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cac0d1ed8c9ebc34639a723d1de883cd26d05c7a3fb8fe0f74efda5642dff75a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:14:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cac0d1ed8c9ebc34639a723d1de883cd26d05c7a3fb8fe0f74efda5642dff75a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T15:14:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cac0d1ed8c9ebc34639a723d1de883cd26d05c7a3fb8fe0f74efda5642dff75a"} {"level":"debug","ts":"2026-07-24T15:14:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cac0d1ed8c9ebc34639a723d1de883cd26d05c7a3fb8fe0f74efda5642dff75a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T15:14:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cac0d1ed8c9ebc34639a723d1de883cd26d05c7a3fb8fe0f74efda5642dff75a"} {"level":"debug","ts":"2026-07-24T15:14:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cac0d1ed8c9ebc34639a723d1de883cd26d05c7a3fb8fe0f74efda5642dff75a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:14:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:14:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cac0d1ed8c9ebc34639a723d1de883cd26d05c7a3fb8fe0f74efda5642dff75a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:14:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cac0d1ed8c9ebc34639a723d1de883cd26d05c7a3fb8fe0f74efda5642dff75a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:14:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cac0d1ed8c9ebc34639a723d1de883cd26d05c7a3fb8fe0f74efda5642dff75a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T15:14:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cac0d1ed8c9ebc34639a723d1de883cd26d05c7a3fb8fe0f74efda5642dff75a"} {"level":"debug","ts":"2026-07-24T15:14:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:14:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:14:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:14:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:14:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:14:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:14:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:14:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9"} {"level":"info","ts":"2026-07-24T15:14:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:14:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:14:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:14:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:14:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9"} {"level":"error","ts":"2026-07-24T15:14:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T15:14:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:14:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T15:14:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9"} {"level":"debug","ts":"2026-07-24T15:14:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:14:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:14:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:14:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:14:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:14:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:14:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:14:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:14:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:14:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T15:14:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9"} {"level":"debug","ts":"2026-07-24T15:14:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T15:14:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9"} {"level":"debug","ts":"2026-07-24T15:14:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:14:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:14:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:14:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:14:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9"} {"level":"debug","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9"} {"level":"debug","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30e3b2e24610402717b46509ada91e36cb1b724aa3f04b3a914c4a2c756f18d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:14:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:14:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30e3b2e24610402717b46509ada91e36cb1b724aa3f04b3a914c4a2c756f18d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30e3b2e24610402717b46509ada91e36cb1b724aa3f04b3a914c4a2c756f18d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30e3b2e24610402717b46509ada91e36cb1b724aa3f04b3a914c4a2c756f18d3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30e3b2e24610402717b46509ada91e36cb1b724aa3f04b3a914c4a2c756f18d3"} {"level":"debug","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:14:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:14:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30e3b2e24610402717b46509ada91e36cb1b724aa3f04b3a914c4a2c756f18d3"} {"level":"info","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30e3b2e24610402717b46509ada91e36cb1b724aa3f04b3a914c4a2c756f18d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:14:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:14:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["30e3b2e24610402717b46509ada91e36cb1b724aa3f04b3a914c4a2c756f18d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30e3b2e24610402717b46509ada91e36cb1b724aa3f04b3a914c4a2c756f18d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:14:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:14:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9"} {"level":"info","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30e3b2e24610402717b46509ada91e36cb1b724aa3f04b3a914c4a2c756f18d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:14:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:14:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30e3b2e24610402717b46509ada91e36cb1b724aa3f04b3a914c4a2c756f18d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:14:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:14:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30e3b2e24610402717b46509ada91e36cb1b724aa3f04b3a914c4a2c756f18d3"} {"level":"info","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30e3b2e24610402717b46509ada91e36cb1b724aa3f04b3a914c4a2c756f18d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:14:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:14:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["30e3b2e24610402717b46509ada91e36cb1b724aa3f04b3a914c4a2c756f18d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30e3b2e24610402717b46509ada91e36cb1b724aa3f04b3a914c4a2c756f18d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:14:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:14:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9"} {"level":"info","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30e3b2e24610402717b46509ada91e36cb1b724aa3f04b3a914c4a2c756f18d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:14:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:14:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30e3b2e24610402717b46509ada91e36cb1b724aa3f04b3a914c4a2c756f18d3"} {"level":"info","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30e3b2e24610402717b46509ada91e36cb1b724aa3f04b3a914c4a2c756f18d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30e3b2e24610402717b46509ada91e36cb1b724aa3f04b3a914c4a2c756f18d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:14:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:14:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["30e3b2e24610402717b46509ada91e36cb1b724aa3f04b3a914c4a2c756f18d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9"} {"level":"info","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30e3b2e24610402717b46509ada91e36cb1b724aa3f04b3a914c4a2c756f18d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:14:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:14:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30e3b2e24610402717b46509ada91e36cb1b724aa3f04b3a914c4a2c756f18d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:14:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:14:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30e3b2e24610402717b46509ada91e36cb1b724aa3f04b3a914c4a2c756f18d3"} {"level":"info","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30e3b2e24610402717b46509ada91e36cb1b724aa3f04b3a914c4a2c756f18d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:14:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:14:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9"} {"level":"info","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30e3b2e24610402717b46509ada91e36cb1b724aa3f04b3a914c4a2c756f18d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:14:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:14:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30e3b2e24610402717b46509ada91e36cb1b724aa3f04b3a914c4a2c756f18d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:14:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:14:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30e3b2e24610402717b46509ada91e36cb1b724aa3f04b3a914c4a2c756f18d3"} {"level":"error","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:14:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:14:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9"} {"level":"info","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30e3b2e24610402717b46509ada91e36cb1b724aa3f04b3a914c4a2c756f18d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:14:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:14:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["30e3b2e24610402717b46509ada91e36cb1b724aa3f04b3a914c4a2c756f18d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30e3b2e24610402717b46509ada91e36cb1b724aa3f04b3a914c4a2c756f18d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30e3b2e24610402717b46509ada91e36cb1b724aa3f04b3a914c4a2c756f18d3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9"} {"level":"debug","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:14:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:14:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30e3b2e24610402717b46509ada91e36cb1b724aa3f04b3a914c4a2c756f18d3"} {"level":"info","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b63e986f099db6dded059b613fdc61522ac42647ee6624458f88a0fe4a80b4c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:14:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:14:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b63e986f099db6dded059b613fdc61522ac42647ee6624458f88a0fe4a80b4c6"} {"level":"info","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b63e986f099db6dded059b613fdc61522ac42647ee6624458f88a0fe4a80b4c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:14:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:14:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9"} {"level":"info","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b63e986f099db6dded059b613fdc61522ac42647ee6624458f88a0fe4a80b4c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:14:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:14:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b63e986f099db6dded059b613fdc61522ac42647ee6624458f88a0fe4a80b4c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:14:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:14:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b63e986f099db6dded059b613fdc61522ac42647ee6624458f88a0fe4a80b4c6"} {"level":"error","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:14:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:14:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9"} {"level":"info","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b63e986f099db6dded059b613fdc61522ac42647ee6624458f88a0fe4a80b4c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:14:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:14:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b63e986f099db6dded059b613fdc61522ac42647ee6624458f88a0fe4a80b4c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b63e986f099db6dded059b613fdc61522ac42647ee6624458f88a0fe4a80b4c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b63e986f099db6dded059b613fdc61522ac42647ee6624458f88a0fe4a80b4c6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9"} {"level":"debug","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:14:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:14:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b63e986f099db6dded059b613fdc61522ac42647ee6624458f88a0fe4a80b4c6"} {"level":"info","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:14:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:14:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9"} {"level":"debug","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9"} {"level":"debug","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:14:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:14:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:14:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:14:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9"} {"level":"debug","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9"} {"level":"debug","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:14:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:14:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"165f56966fce28cfdb6d60ad2e0198e3638e4857a25c2ba3d30e29096006c671","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:14:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:14:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/165f56966fce28cfdb6d60ad2e0198e3638e4857a25c2ba3d30e29096006c671"} {"level":"info","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"165f56966fce28cfdb6d60ad2e0198e3638e4857a25c2ba3d30e29096006c671","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:14:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:14:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9"} {"level":"info","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"165f56966fce28cfdb6d60ad2e0198e3638e4857a25c2ba3d30e29096006c671","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:14:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:14:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/165f56966fce28cfdb6d60ad2e0198e3638e4857a25c2ba3d30e29096006c671"} {"level":"info","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"165f56966fce28cfdb6d60ad2e0198e3638e4857a25c2ba3d30e29096006c671","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:14:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:14:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["165f56966fce28cfdb6d60ad2e0198e3638e4857a25c2ba3d30e29096006c671"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"165f56966fce28cfdb6d60ad2e0198e3638e4857a25c2ba3d30e29096006c671","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:14:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:14:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9"} {"level":"info","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"165f56966fce28cfdb6d60ad2e0198e3638e4857a25c2ba3d30e29096006c671","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:14:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:14:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"165f56966fce28cfdb6d60ad2e0198e3638e4857a25c2ba3d30e29096006c671","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:14:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:14:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/165f56966fce28cfdb6d60ad2e0198e3638e4857a25c2ba3d30e29096006c671"} {"level":"info","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"165f56966fce28cfdb6d60ad2e0198e3638e4857a25c2ba3d30e29096006c671","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:14:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:14:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["165f56966fce28cfdb6d60ad2e0198e3638e4857a25c2ba3d30e29096006c671"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9"} {"level":"info","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"165f56966fce28cfdb6d60ad2e0198e3638e4857a25c2ba3d30e29096006c671","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"165f56966fce28cfdb6d60ad2e0198e3638e4857a25c2ba3d30e29096006c671","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:14:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:14:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"165f56966fce28cfdb6d60ad2e0198e3638e4857a25c2ba3d30e29096006c671","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"165f56966fce28cfdb6d60ad2e0198e3638e4857a25c2ba3d30e29096006c671","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"165f56966fce28cfdb6d60ad2e0198e3638e4857a25c2ba3d30e29096006c671","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/165f56966fce28cfdb6d60ad2e0198e3638e4857a25c2ba3d30e29096006c671"} {"level":"debug","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ee619cf5aa6d754279964d8d8f473db1f50d8e1495f68989618f40376820fc2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:14:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:14:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ee619cf5aa6d754279964d8d8f473db1f50d8e1495f68989618f40376820fc2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ee619cf5aa6d754279964d8d8f473db1f50d8e1495f68989618f40376820fc2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"165f56966fce28cfdb6d60ad2e0198e3638e4857a25c2ba3d30e29096006c671","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:14:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:14:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["165f56966fce28cfdb6d60ad2e0198e3638e4857a25c2ba3d30e29096006c671"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"165f56966fce28cfdb6d60ad2e0198e3638e4857a25c2ba3d30e29096006c671","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ee619cf5aa6d754279964d8d8f473db1f50d8e1495f68989618f40376820fc2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"165f56966fce28cfdb6d60ad2e0198e3638e4857a25c2ba3d30e29096006c671","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9"} {"level":"debug","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ee619cf5aa6d754279964d8d8f473db1f50d8e1495f68989618f40376820fc2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/165f56966fce28cfdb6d60ad2e0198e3638e4857a25c2ba3d30e29096006c671"} {"level":"info","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ee619cf5aa6d754279964d8d8f473db1f50d8e1495f68989618f40376820fc2"} {"level":"debug","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ee619cf5aa6d754279964d8d8f473db1f50d8e1495f68989618f40376820fc2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:14:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:14:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4ee619cf5aa6d754279964d8d8f473db1f50d8e1495f68989618f40376820fc2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ee619cf5aa6d754279964d8d8f473db1f50d8e1495f68989618f40376820fc2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec52c6d3b8a955cc3a1d7369130807518bdb644b303ee7de4d3dd709211ca4f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:14:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:14:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec52c6d3b8a955cc3a1d7369130807518bdb644b303ee7de4d3dd709211ca4f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ee619cf5aa6d754279964d8d8f473db1f50d8e1495f68989618f40376820fc2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec52c6d3b8a955cc3a1d7369130807518bdb644b303ee7de4d3dd709211ca4f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec52c6d3b8a955cc3a1d7369130807518bdb644b303ee7de4d3dd709211ca4f7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec52c6d3b8a955cc3a1d7369130807518bdb644b303ee7de4d3dd709211ca4f7"} {"level":"debug","ts":"2026-07-24T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec52c6d3b8a955cc3a1d7369130807518bdb644b303ee7de4d3dd709211ca4f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:14:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:14:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec52c6d3b8a955cc3a1d7369130807518bdb644b303ee7de4d3dd709211ca4f7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ee619cf5aa6d754279964d8d8f473db1f50d8e1495f68989618f40376820fc2"} {"level":"info","ts":"2026-07-24T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec52c6d3b8a955cc3a1d7369130807518bdb644b303ee7de4d3dd709211ca4f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec52c6d3b8a955cc3a1d7369130807518bdb644b303ee7de4d3dd709211ca4f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:14:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:14:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec52c6d3b8a955cc3a1d7369130807518bdb644b303ee7de4d3dd709211ca4f7"} {"level":"info","ts":"2026-07-24T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec52c6d3b8a955cc3a1d7369130807518bdb644b303ee7de4d3dd709211ca4f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec52c6d3b8a955cc3a1d7369130807518bdb644b303ee7de4d3dd709211ca4f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec52c6d3b8a955cc3a1d7369130807518bdb644b303ee7de4d3dd709211ca4f7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec52c6d3b8a955cc3a1d7369130807518bdb644b303ee7de4d3dd709211ca4f7"} {"level":"debug","ts":"2026-07-24T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec52c6d3b8a955cc3a1d7369130807518bdb644b303ee7de4d3dd709211ca4f7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec52c6d3b8a955cc3a1d7369130807518bdb644b303ee7de4d3dd709211ca4f7"} {"level":"debug","ts":"2026-07-24T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec52c6d3b8a955cc3a1d7369130807518bdb644b303ee7de4d3dd709211ca4f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:14:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:14:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec52c6d3b8a955cc3a1d7369130807518bdb644b303ee7de4d3dd709211ca4f7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec52c6d3b8a955cc3a1d7369130807518bdb644b303ee7de4d3dd709211ca4f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec52c6d3b8a955cc3a1d7369130807518bdb644b303ee7de4d3dd709211ca4f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:14:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:14:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec52c6d3b8a955cc3a1d7369130807518bdb644b303ee7de4d3dd709211ca4f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec52c6d3b8a955cc3a1d7369130807518bdb644b303ee7de4d3dd709211ca4f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec52c6d3b8a955cc3a1d7369130807518bdb644b303ee7de4d3dd709211ca4f7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec52c6d3b8a955cc3a1d7369130807518bdb644b303ee7de4d3dd709211ca4f7"} {"level":"debug","ts":"2026-07-24T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c418244c8795aafcaa38df340a22943da5e6dc77f4f8c2d142afad2a76c0fc8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:14:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:14:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec52c6d3b8a955cc3a1d7369130807518bdb644b303ee7de4d3dd709211ca4f7"} {"level":"info","ts":"2026-07-24T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c418244c8795aafcaa38df340a22943da5e6dc77f4f8c2d142afad2a76c0fc8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec52c6d3b8a955cc3a1d7369130807518bdb644b303ee7de4d3dd709211ca4f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:14:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:14:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec52c6d3b8a955cc3a1d7369130807518bdb644b303ee7de4d3dd709211ca4f7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c418244c8795aafcaa38df340a22943da5e6dc77f4f8c2d142afad2a76c0fc8"} {"level":"info","ts":"2026-07-24T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec52c6d3b8a955cc3a1d7369130807518bdb644b303ee7de4d3dd709211ca4f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c418244c8795aafcaa38df340a22943da5e6dc77f4f8c2d142afad2a76c0fc8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:14:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:14:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c418244c8795aafcaa38df340a22943da5e6dc77f4f8c2d142afad2a76c0fc8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec52c6d3b8a955cc3a1d7369130807518bdb644b303ee7de4d3dd709211ca4f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c418244c8795aafcaa38df340a22943da5e6dc77f4f8c2d142afad2a76c0fc8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c418244c8795aafcaa38df340a22943da5e6dc77f4f8c2d142afad2a76c0fc8"} {"level":"debug","ts":"2026-07-24T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c418244c8795aafcaa38df340a22943da5e6dc77f4f8c2d142afad2a76c0fc8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:14:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:14:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c418244c8795aafcaa38df340a22943da5e6dc77f4f8c2d142afad2a76c0fc8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec52c6d3b8a955cc3a1d7369130807518bdb644b303ee7de4d3dd709211ca4f7"} {"level":"info","ts":"2026-07-24T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c418244c8795aafcaa38df340a22943da5e6dc77f4f8c2d142afad2a76c0fc8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c418244c8795aafcaa38df340a22943da5e6dc77f4f8c2d142afad2a76c0fc8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:14:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:14:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c418244c8795aafcaa38df340a22943da5e6dc77f4f8c2d142afad2a76c0fc8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c418244c8795aafcaa38df340a22943da5e6dc77f4f8c2d142afad2a76c0fc8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c418244c8795aafcaa38df340a22943da5e6dc77f4f8c2d142afad2a76c0fc8"} {"level":"debug","ts":"2026-07-24T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c418244c8795aafcaa38df340a22943da5e6dc77f4f8c2d142afad2a76c0fc8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff959bfe71f7cbfe05d8cb9ede8282650d0cc5dd7e5e6631f5c5157be9609bcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:14:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:14:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c418244c8795aafcaa38df340a22943da5e6dc77f4f8c2d142afad2a76c0fc8"} {"level":"info","ts":"2026-07-24T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff959bfe71f7cbfe05d8cb9ede8282650d0cc5dd7e5e6631f5c5157be9609bcc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c418244c8795aafcaa38df340a22943da5e6dc77f4f8c2d142afad2a76c0fc8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:14:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:14:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c418244c8795aafcaa38df340a22943da5e6dc77f4f8c2d142afad2a76c0fc8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff959bfe71f7cbfe05d8cb9ede8282650d0cc5dd7e5e6631f5c5157be9609bcc"} {"level":"info","ts":"2026-07-24T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c418244c8795aafcaa38df340a22943da5e6dc77f4f8c2d142afad2a76c0fc8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff959bfe71f7cbfe05d8cb9ede8282650d0cc5dd7e5e6631f5c5157be9609bcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:14:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:14:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff959bfe71f7cbfe05d8cb9ede8282650d0cc5dd7e5e6631f5c5157be9609bcc"} {"level":"info","ts":"2026-07-24T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff959bfe71f7cbfe05d8cb9ede8282650d0cc5dd7e5e6631f5c5157be9609bcc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c418244c8795aafcaa38df340a22943da5e6dc77f4f8c2d142afad2a76c0fc8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:14:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:14:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c418244c8795aafcaa38df340a22943da5e6dc77f4f8c2d142afad2a76c0fc8"} {"level":"info","ts":"2026-07-24T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff959bfe71f7cbfe05d8cb9ede8282650d0cc5dd7e5e6631f5c5157be9609bcc"} {"level":"info","ts":"2026-07-24T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c418244c8795aafcaa38df340a22943da5e6dc77f4f8c2d142afad2a76c0fc8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff959bfe71f7cbfe05d8cb9ede8282650d0cc5dd7e5e6631f5c5157be9609bcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:14:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:14:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ff959bfe71f7cbfe05d8cb9ede8282650d0cc5dd7e5e6631f5c5157be9609bcc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f44c6c031674a913bd85e8bd1af1f32895d3667a167cb59926a1f9914090901"} {"level":"info","ts":"2026-07-24T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c418244c8795aafcaa38df340a22943da5e6dc77f4f8c2d142afad2a76c0fc8"} {"level":"info","ts":"2026-07-24T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff959bfe71f7cbfe05d8cb9ede8282650d0cc5dd7e5e6631f5c5157be9609bcc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f44c6c031674a913bd85e8bd1af1f32895d3667a167cb59926a1f9914090901","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:14:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:14:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8f44c6c031674a913bd85e8bd1af1f32895d3667a167cb59926a1f9914090901"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff959bfe71f7cbfe05d8cb9ede8282650d0cc5dd7e5e6631f5c5157be9609bcc"} {"level":"info","ts":"2026-07-24T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70457a4997d89ab3bd4e8054dcad44c81fd895c75e00128e2cd4439ddb265e28"} {"level":"info","ts":"2026-07-24T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f44c6c031674a913bd85e8bd1af1f32895d3667a167cb59926a1f9914090901","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c418244c8795aafcaa38df340a22943da5e6dc77f4f8c2d142afad2a76c0fc8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:14:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:14:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c418244c8795aafcaa38df340a22943da5e6dc77f4f8c2d142afad2a76c0fc8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55a5d4ab21bb36f7f40978ce640f1e48428a71b01d8a07eff1fd4260ceb86991"} {"level":"info","ts":"2026-07-24T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f44c6c031674a913bd85e8bd1af1f32895d3667a167cb59926a1f9914090901"} {"level":"info","ts":"2026-07-24T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c418244c8795aafcaa38df340a22943da5e6dc77f4f8c2d142afad2a76c0fc8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff959bfe71f7cbfe05d8cb9ede8282650d0cc5dd7e5e6631f5c5157be9609bcc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70457a4997d89ab3bd4e8054dcad44c81fd895c75e00128e2cd4439ddb265e28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:14:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:14:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["70457a4997d89ab3bd4e8054dcad44c81fd895c75e00128e2cd4439ddb265e28"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c418244c8795aafcaa38df340a22943da5e6dc77f4f8c2d142afad2a76c0fc8"} {"level":"info","ts":"2026-07-24T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70457a4997d89ab3bd4e8054dcad44c81fd895c75e00128e2cd4439ddb265e28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55a5d4ab21bb36f7f40978ce640f1e48428a71b01d8a07eff1fd4260ceb86991","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:14:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:14:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["55a5d4ab21bb36f7f40978ce640f1e48428a71b01d8a07eff1fd4260ceb86991"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70457a4997d89ab3bd4e8054dcad44c81fd895c75e00128e2cd4439ddb265e28"} {"level":"info","ts":"2026-07-24T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55a5d4ab21bb36f7f40978ce640f1e48428a71b01d8a07eff1fd4260ceb86991","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f44c6c031674a913bd85e8bd1af1f32895d3667a167cb59926a1f9914090901","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c418244c8795aafcaa38df340a22943da5e6dc77f4f8c2d142afad2a76c0fc8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70457a4997d89ab3bd4e8054dcad44c81fd895c75e00128e2cd4439ddb265e28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55a5d4ab21bb36f7f40978ce640f1e48428a71b01d8a07eff1fd4260ceb86991","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:14:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:14:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55a5d4ab21bb36f7f40978ce640f1e48428a71b01d8a07eff1fd4260ceb86991"} {"level":"info","ts":"2026-07-24T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55a5d4ab21bb36f7f40978ce640f1e48428a71b01d8a07eff1fd4260ceb86991","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55a5d4ab21bb36f7f40978ce640f1e48428a71b01d8a07eff1fd4260ceb86991","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55a5d4ab21bb36f7f40978ce640f1e48428a71b01d8a07eff1fd4260ceb86991","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55a5d4ab21bb36f7f40978ce640f1e48428a71b01d8a07eff1fd4260ceb86991"} {"level":"debug","ts":"2026-07-24T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55a5d4ab21bb36f7f40978ce640f1e48428a71b01d8a07eff1fd4260ceb86991","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:14:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:14:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["55a5d4ab21bb36f7f40978ce640f1e48428a71b01d8a07eff1fd4260ceb86991"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55a5d4ab21bb36f7f40978ce640f1e48428a71b01d8a07eff1fd4260ceb86991","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55a5d4ab21bb36f7f40978ce640f1e48428a71b01d8a07eff1fd4260ceb86991","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:14:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:14:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55a5d4ab21bb36f7f40978ce640f1e48428a71b01d8a07eff1fd4260ceb86991"} {"level":"info","ts":"2026-07-24T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55a5d4ab21bb36f7f40978ce640f1e48428a71b01d8a07eff1fd4260ceb86991","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55a5d4ab21bb36f7f40978ce640f1e48428a71b01d8a07eff1fd4260ceb86991","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55a5d4ab21bb36f7f40978ce640f1e48428a71b01d8a07eff1fd4260ceb86991","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55a5d4ab21bb36f7f40978ce640f1e48428a71b01d8a07eff1fd4260ceb86991"} {"level":"debug","ts":"2026-07-24T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55a5d4ab21bb36f7f40978ce640f1e48428a71b01d8a07eff1fd4260ceb86991","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:14:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:14:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["55a5d4ab21bb36f7f40978ce640f1e48428a71b01d8a07eff1fd4260ceb86991"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55a5d4ab21bb36f7f40978ce640f1e48428a71b01d8a07eff1fd4260ceb86991","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55a5d4ab21bb36f7f40978ce640f1e48428a71b01d8a07eff1fd4260ceb86991","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:14:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:14:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55a5d4ab21bb36f7f40978ce640f1e48428a71b01d8a07eff1fd4260ceb86991"} {"level":"info","ts":"2026-07-24T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55a5d4ab21bb36f7f40978ce640f1e48428a71b01d8a07eff1fd4260ceb86991","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55a5d4ab21bb36f7f40978ce640f1e48428a71b01d8a07eff1fd4260ceb86991","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55a5d4ab21bb36f7f40978ce640f1e48428a71b01d8a07eff1fd4260ceb86991","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55a5d4ab21bb36f7f40978ce640f1e48428a71b01d8a07eff1fd4260ceb86991"} {"level":"debug","ts":"2026-07-24T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55a5d4ab21bb36f7f40978ce640f1e48428a71b01d8a07eff1fd4260ceb86991","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:14:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:14:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["55a5d4ab21bb36f7f40978ce640f1e48428a71b01d8a07eff1fd4260ceb86991"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55a5d4ab21bb36f7f40978ce640f1e48428a71b01d8a07eff1fd4260ceb86991","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55a5d4ab21bb36f7f40978ce640f1e48428a71b01d8a07eff1fd4260ceb86991","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:14:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:14:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55a5d4ab21bb36f7f40978ce640f1e48428a71b01d8a07eff1fd4260ceb86991"} {"level":"info","ts":"2026-07-24T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55a5d4ab21bb36f7f40978ce640f1e48428a71b01d8a07eff1fd4260ceb86991","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55a5d4ab21bb36f7f40978ce640f1e48428a71b01d8a07eff1fd4260ceb86991","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55a5d4ab21bb36f7f40978ce640f1e48428a71b01d8a07eff1fd4260ceb86991","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T15:14:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55a5d4ab21bb36f7f40978ce640f1e48428a71b01d8a07eff1fd4260ceb86991"} {"level":"debug","ts":"2026-07-24T15:14:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55a5d4ab21bb36f7f40978ce640f1e48428a71b01d8a07eff1fd4260ceb86991","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:14:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:14:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["55a5d4ab21bb36f7f40978ce640f1e48428a71b01d8a07eff1fd4260ceb86991"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:14:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55a5d4ab21bb36f7f40978ce640f1e48428a71b01d8a07eff1fd4260ceb86991","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:14:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55a5d4ab21bb36f7f40978ce640f1e48428a71b01d8a07eff1fd4260ceb86991","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:14:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:14:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:14:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55a5d4ab21bb36f7f40978ce640f1e48428a71b01d8a07eff1fd4260ceb86991"} {"level":"info","ts":"2026-07-24T15:14:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55a5d4ab21bb36f7f40978ce640f1e48428a71b01d8a07eff1fd4260ceb86991","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:14:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55a5d4ab21bb36f7f40978ce640f1e48428a71b01d8a07eff1fd4260ceb86991","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:14:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55a5d4ab21bb36f7f40978ce640f1e48428a71b01d8a07eff1fd4260ceb86991","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T15:14:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55a5d4ab21bb36f7f40978ce640f1e48428a71b01d8a07eff1fd4260ceb86991"} {"level":"debug","ts":"2026-07-24T15:14:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55a5d4ab21bb36f7f40978ce640f1e48428a71b01d8a07eff1fd4260ceb86991","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:14:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:14:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["55a5d4ab21bb36f7f40978ce640f1e48428a71b01d8a07eff1fd4260ceb86991"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:14:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55a5d4ab21bb36f7f40978ce640f1e48428a71b01d8a07eff1fd4260ceb86991","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:14:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55a5d4ab21bb36f7f40978ce640f1e48428a71b01d8a07eff1fd4260ceb86991","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T15:14:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55a5d4ab21bb36f7f40978ce640f1e48428a71b01d8a07eff1fd4260ceb86991"} {"level":"info","ts":"2026-07-24T15:14:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5a42317e-c152-4f6f-923d-3ad739e0f6c5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:53214","PortSpecifier":{"PortValue":53214}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5a42317e-c152-4f6f-923d-3ad739e0f6c5","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-dc7d81.apps.3be3295e-9019-4b6b-9df8-99ce19d48613.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T15:14:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5a42317e-c152-4f6f-923d-3ad739e0f6c5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:53214","PortSpecifier":{"PortValue":53214}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784906059,"nanos":463401892},"http":{"id":"5a42317e-c152-4f6f-923d-3ad739e0f6c5","method":"POST","headers":{":authority":"e2e-shared-a-dc7d81.apps.3be3295e-9019-4b6b-9df8-99ce19d48613.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T15:14:19Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5a42317e-c152-4f6f-923d-3ad739e0f6c5","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T15:14:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5a42317e-c152-4f6f-923d-3ad739e0f6c5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e9103260-9a05-4d99-8fa1-24683f35cf9c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac7166a7-f0ef-4ddf-98c5-a70fe2accb13"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/99ce19d48613"]}} {"level":"debug","ts":"2026-07-24T15:14:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5a42317e-c152-4f6f-923d-3ad739e0f6c5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/99ce19d48613"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac7166a7-f0ef-4ddf-98c5-a70fe2accb13"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e9103260-9a05-4d99-8fa1-24683f35cf9c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"09bae11e466c1b7fd4a4390697823bdeb809c77799dcbe3c253ff8186111edd5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.73:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-dc7d81.apps.3be3295e-9019-4b6b-9df8-99ce19d48613.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T15:14:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5a42317e-c152-4f6f-923d-3ad739e0f6c5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T15:14:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5a42317e-c152-4f6f-923d-3ad739e0f6c5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T15:14:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5a42317e-c152-4f6f-923d-3ad739e0f6c5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-dc7d81/auth-test-model-dc7d81\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-dc7d81/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T15:14:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5a42317e-c152-4f6f-923d-3ad739e0f6c5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T15:14:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5a42317e-c152-4f6f-923d-3ad739e0f6c5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T15:14:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5a42317e-c152-4f6f-923d-3ad739e0f6c5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-24T15:14:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5a42317e-c152-4f6f-923d-3ad739e0f6c5","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T15:14:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5a42317e-c152-4f6f-923d-3ad739e0f6c5","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T15:14:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5520e344-0016-4258-b69c-d7c05038927b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:39966","PortSpecifier":{"PortValue":39966}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5520e344-0016-4258-b69c-d7c05038927b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-8ea489.apps.3be3295e-9019-4b6b-9df8-99ce19d48613.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T15:14:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5520e344-0016-4258-b69c-d7c05038927b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:39966","PortSpecifier":{"PortValue":39966}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784906059,"nanos":498992962},"http":{"id":"5520e344-0016-4258-b69c-d7c05038927b","method":"POST","headers":{":authority":"e2e-shared-b-8ea489.apps.3be3295e-9019-4b6b-9df8-99ce19d48613.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T15:14:19Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5520e344-0016-4258-b69c-d7c05038927b","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T15:14:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5520e344-0016-4258-b69c-d7c05038927b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e9103260-9a05-4d99-8fa1-24683f35cf9c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac7166a7-f0ef-4ddf-98c5-a70fe2accb13"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/99ce19d48613"]}} {"level":"debug","ts":"2026-07-24T15:14:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5520e344-0016-4258-b69c-d7c05038927b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/99ce19d48613"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac7166a7-f0ef-4ddf-98c5-a70fe2accb13"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e9103260-9a05-4d99-8fa1-24683f35cf9c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3c418244c8795aafcaa38df340a22943da5e6dc77f4f8c2d142afad2a76c0fc8"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.76:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-8ea489.apps.3be3295e-9019-4b6b-9df8-99ce19d48613.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T15:14:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5520e344-0016-4258-b69c-d7c05038927b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T15:14:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5520e344-0016-4258-b69c-d7c05038927b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T15:14:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5520e344-0016-4258-b69c-d7c05038927b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-8ea489/auth-test-model-8ea489\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-8ea489/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T15:14:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5520e344-0016-4258-b69c-d7c05038927b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T15:14:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5520e344-0016-4258-b69c-d7c05038927b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T15:14:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5520e344-0016-4258-b69c-d7c05038927b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-24T15:14:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5520e344-0016-4258-b69c-d7c05038927b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T15:14:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5520e344-0016-4258-b69c-d7c05038927b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T15:14:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"700b81d6-a6b8-4725-a5ef-010a45772d76","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:53224","PortSpecifier":{"PortValue":53224}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"700b81d6-a6b8-4725-a5ef-010a45772d76","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-dc7d81.apps.3be3295e-9019-4b6b-9df8-99ce19d48613.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T15:14:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"700b81d6-a6b8-4725-a5ef-010a45772d76","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:53224","PortSpecifier":{"PortValue":53224}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784906059,"nanos":536289009},"http":{"id":"700b81d6-a6b8-4725-a5ef-010a45772d76","method":"POST","headers":{":authority":"e2e-shared-a-dc7d81.apps.3be3295e-9019-4b6b-9df8-99ce19d48613.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T15:14:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"700b81d6-a6b8-4725-a5ef-010a45772d76","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1PKusrNbdGeoFobJL_Lizn7Z5SkTK0et9Luia5rWclzENyyuHKPnWX8Ef6oVc"} {"level":"debug","ts":"2026-07-24T15:14:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"700b81d6-a6b8-4725-a5ef-010a45772d76","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-dc7d81.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1PKusrNbdGeoFobJL_Lizn7Z5SkTK0et9Luia5rWclzENyyuHKPnWX8Ef6oVc\"}"} {"level":"debug","ts":"2026-07-24T15:14:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"700b81d6-a6b8-4725-a5ef-010a45772d76","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-dc7d81.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"0198d56b-d8f9-442a-be8a-0931436b1371","keyName":"e2e-auth-iso-a-9bbd39","subscription":"e2e-auth-iso-e592cb","tenant":"e2e-shared-a-dc7d81","userId":"0198d56b-d8f9-442a-be8a-0931436b1371","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T15:14:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"700b81d6-a6b8-4725-a5ef-010a45772d76","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T15:14:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"700b81d6-a6b8-4725-a5ef-010a45772d76","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T15:14:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"700b81d6-a6b8-4725-a5ef-010a45772d76","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T15:14:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"700b81d6-a6b8-4725-a5ef-010a45772d76","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-dc7d81/auth-test-model-dc7d81\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-dc7d81/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T15:14:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"700b81d6-a6b8-4725-a5ef-010a45772d76","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-24T15:14:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"700b81d6-a6b8-4725-a5ef-010a45772d76","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T15:14:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"700b81d6-a6b8-4725-a5ef-010a45772d76","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T15:14:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"700b81d6-a6b8-4725-a5ef-010a45772d76","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-e592cb"} {"level":"info","ts":"2026-07-24T15:14:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"700b81d6-a6b8-4725-a5ef-010a45772d76","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T15:14:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"700b81d6-a6b8-4725-a5ef-010a45772d76","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T15:14:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/55a5d4ab21bb36f7f40978ce640f1e48428a71b01d8a07eff1fd4260ceb86991"} {"level":"info","ts":"2026-07-24T15:14:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/30e3b2e24610402717b46509ada91e36cb1b724aa3f04b3a914c4a2c756f18d3"} {"level":"info","ts":"2026-07-24T15:14:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/095e1f35d309fdaadd27378d0f8634c66fba071f51689f102d3ebd748ac280a9"} {"level":"info","ts":"2026-07-24T15:14:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/033d3f6b18b4b8843accde2c6aae4d163e5b5f62c919e8a758bd7e266e489a8d"} {"level":"info","ts":"2026-07-24T15:14:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/70457a4997d89ab3bd4e8054dcad44c81fd895c75e00128e2cd4439ddb265e28"} {"level":"info","ts":"2026-07-24T15:14:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/165f56966fce28cfdb6d60ad2e0198e3638e4857a25c2ba3d30e29096006c671"} {"level":"info","ts":"2026-07-24T15:14:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3c418244c8795aafcaa38df340a22943da5e6dc77f4f8c2d142afad2a76c0fc8"} {"level":"info","ts":"2026-07-24T15:14:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7b1ef7cbc9f4bd6212c3657be9cf2e8359d760550e0722cee4ced1d55b2cb2d4"} {"level":"info","ts":"2026-07-24T15:14:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cc274dce64c7732ea5fedf41960042c105d55cb0638919f1c5e01b2711c4ec65"} {"level":"info","ts":"2026-07-24T15:14:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8f44c6c031674a913bd85e8bd1af1f32895d3667a167cb59926a1f9914090901"} {"level":"info","ts":"2026-07-24T15:14:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cac0d1ed8c9ebc34639a723d1de883cd26d05c7a3fb8fe0f74efda5642dff75a"} {"level":"info","ts":"2026-07-24T15:14:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6771e3f926351e7e7eea11533db2ea5dd4b06837db63431c8ca754ee0b6658f9"} {"level":"info","ts":"2026-07-24T15:14:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8e7c5b73feecb29b1314b8c0bc46ec6fae6f89ecd57cf8eba7fa98708775e732"} {"level":"info","ts":"2026-07-24T15:14:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b63e986f099db6dded059b613fdc61522ac42647ee6624458f88a0fe4a80b4c6"} {"level":"info","ts":"2026-07-24T15:14:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c4e687e33ef5126e0cc1886a740289496397f51a84afdb8944a6822eeef05fa0"} {"level":"info","ts":"2026-07-24T15:14:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ff959bfe71f7cbfe05d8cb9ede8282650d0cc5dd7e5e6631f5c5157be9609bcc"} {"level":"info","ts":"2026-07-24T15:14:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4ee619cf5aa6d754279964d8d8f473db1f50d8e1495f68989618f40376820fc2"} {"level":"info","ts":"2026-07-24T15:14:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/09bae11e466c1b7fd4a4390697823bdeb809c77799dcbe3c253ff8186111edd5"} {"level":"info","ts":"2026-07-24T15:14:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/acf96e3b982b089cd83434e9171be5d1f8d69e817d050d6f73eabb43603009d9"} {"level":"info","ts":"2026-07-24T15:14:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a475b67fc0171176cf1b95af1b4eedf3fdee92674df8efc4e08205be8a14044a"} {"level":"info","ts":"2026-07-24T15:14:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/13a01a0fc908e202f4924d44dfc73f92302c6f38e89cedfd6d041e071796c9a1"} {"level":"info","ts":"2026-07-24T15:14:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/665ea2896a9fb3af20be0e0f82d647099470102ead0fccd55ed945d9ce5e923d"} {"level":"info","ts":"2026-07-24T15:14:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dc1554bd064c9ca27e430a208c08971962865819e62f6151cb1596686dcb916b"} {"level":"info","ts":"2026-07-24T15:14:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ec52c6d3b8a955cc3a1d7369130807518bdb644b303ee7de4d3dd709211ca4f7"} {"level":"debug","ts":"2026-07-24T15:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09bae11e466c1b7fd4a4390697823bdeb809c77799dcbe3c253ff8186111edd5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:15:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:15:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09bae11e466c1b7fd4a4390697823bdeb809c77799dcbe3c253ff8186111edd5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T15:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09bae11e466c1b7fd4a4390697823bdeb809c77799dcbe3c253ff8186111edd5"} {"level":"debug","ts":"2026-07-24T15:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09bae11e466c1b7fd4a4390697823bdeb809c77799dcbe3c253ff8186111edd5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09bae11e466c1b7fd4a4390697823bdeb809c77799dcbe3c253ff8186111edd5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T15:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09bae11e466c1b7fd4a4390697823bdeb809c77799dcbe3c253ff8186111edd5"} {"level":"debug","ts":"2026-07-24T15:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09bae11e466c1b7fd4a4390697823bdeb809c77799dcbe3c253ff8186111edd5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:15:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:15:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["09bae11e466c1b7fd4a4390697823bdeb809c77799dcbe3c253ff8186111edd5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09bae11e466c1b7fd4a4390697823bdeb809c77799dcbe3c253ff8186111edd5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09bae11e466c1b7fd4a4390697823bdeb809c77799dcbe3c253ff8186111edd5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T15:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09bae11e466c1b7fd4a4390697823bdeb809c77799dcbe3c253ff8186111edd5"} {"level":"debug","ts":"2026-07-24T15:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f4e46b7010e59973e29b9b49926b38759af3f9a6d1c15b48436e610e93a4774","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:15:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:15:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f4e46b7010e59973e29b9b49926b38759af3f9a6d1c15b48436e610e93a4774"} {"level":"info","ts":"2026-07-24T15:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f4e46b7010e59973e29b9b49926b38759af3f9a6d1c15b48436e610e93a4774","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f4e46b7010e59973e29b9b49926b38759af3f9a6d1c15b48436e610e93a4774","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:15:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:15:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f4e46b7010e59973e29b9b49926b38759af3f9a6d1c15b48436e610e93a4774"} {"level":"info","ts":"2026-07-24T15:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f4e46b7010e59973e29b9b49926b38759af3f9a6d1c15b48436e610e93a4774","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f4e46b7010e59973e29b9b49926b38759af3f9a6d1c15b48436e610e93a4774","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f4e46b7010e59973e29b9b49926b38759af3f9a6d1c15b48436e610e93a4774","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T15:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f4e46b7010e59973e29b9b49926b38759af3f9a6d1c15b48436e610e93a4774"} {"level":"debug","ts":"2026-07-24T15:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f4e46b7010e59973e29b9b49926b38759af3f9a6d1c15b48436e610e93a4774","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:15:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:15:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0f4e46b7010e59973e29b9b49926b38759af3f9a6d1c15b48436e610e93a4774"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f4e46b7010e59973e29b9b49926b38759af3f9a6d1c15b48436e610e93a4774","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f4e46b7010e59973e29b9b49926b38759af3f9a6d1c15b48436e610e93a4774","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:15:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:15:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f4e46b7010e59973e29b9b49926b38759af3f9a6d1c15b48436e610e93a4774","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f4e46b7010e59973e29b9b49926b38759af3f9a6d1c15b48436e610e93a4774","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T15:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f4e46b7010e59973e29b9b49926b38759af3f9a6d1c15b48436e610e93a4774"} {"level":"debug","ts":"2026-07-24T15:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f4e46b7010e59973e29b9b49926b38759af3f9a6d1c15b48436e610e93a4774","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bdb82cacc703f44df58f9060d66550d824974b771d1885259ec0288f90e332a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:15:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:15:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f4e46b7010e59973e29b9b49926b38759af3f9a6d1c15b48436e610e93a4774"} {"level":"info","ts":"2026-07-24T15:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bdb82cacc703f44df58f9060d66550d824974b771d1885259ec0288f90e332a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f4e46b7010e59973e29b9b49926b38759af3f9a6d1c15b48436e610e93a4774","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:15:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:15:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0f4e46b7010e59973e29b9b49926b38759af3f9a6d1c15b48436e610e93a4774"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bdb82cacc703f44df58f9060d66550d824974b771d1885259ec0288f90e332a5"} {"level":"info","ts":"2026-07-24T15:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f4e46b7010e59973e29b9b49926b38759af3f9a6d1c15b48436e610e93a4774","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bdb82cacc703f44df58f9060d66550d824974b771d1885259ec0288f90e332a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:15:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:15:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bdb82cacc703f44df58f9060d66550d824974b771d1885259ec0288f90e332a5"} {"level":"info","ts":"2026-07-24T15:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bdb82cacc703f44df58f9060d66550d824974b771d1885259ec0288f90e332a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f4e46b7010e59973e29b9b49926b38759af3f9a6d1c15b48436e610e93a4774","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:15:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:15:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f4e46b7010e59973e29b9b49926b38759af3f9a6d1c15b48436e610e93a4774"} {"level":"info","ts":"2026-07-24T15:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f4e46b7010e59973e29b9b49926b38759af3f9a6d1c15b48436e610e93a4774","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bdb82cacc703f44df58f9060d66550d824974b771d1885259ec0288f90e332a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f4e46b7010e59973e29b9b49926b38759af3f9a6d1c15b48436e610e93a4774","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f4e46b7010e59973e29b9b49926b38759af3f9a6d1c15b48436e610e93a4774","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:15:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:15:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0f4e46b7010e59973e29b9b49926b38759af3f9a6d1c15b48436e610e93a4774"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bdb82cacc703f44df58f9060d66550d824974b771d1885259ec0288f90e332a5"} {"level":"info","ts":"2026-07-24T15:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f4e46b7010e59973e29b9b49926b38759af3f9a6d1c15b48436e610e93a4774","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cac0d1ed8c9ebc34639a723d1de883cd26d05c7a3fb8fe0f74efda5642dff75a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:15:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:15:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cac0d1ed8c9ebc34639a723d1de883cd26d05c7a3fb8fe0f74efda5642dff75a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bdb82cacc703f44df58f9060d66550d824974b771d1885259ec0288f90e332a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:15:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:15:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bdb82cacc703f44df58f9060d66550d824974b771d1885259ec0288f90e332a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f4e46b7010e59973e29b9b49926b38759af3f9a6d1c15b48436e610e93a4774"} {"level":"info","ts":"2026-07-24T15:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bdb82cacc703f44df58f9060d66550d824974b771d1885259ec0288f90e332a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f4e46b7010e59973e29b9b49926b38759af3f9a6d1c15b48436e610e93a4774","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cac0d1ed8c9ebc34639a723d1de883cd26d05c7a3fb8fe0f74efda5642dff75a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:15:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:15:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cac0d1ed8c9ebc34639a723d1de883cd26d05c7a3fb8fe0f74efda5642dff75a"} {"level":"info","ts":"2026-07-24T15:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cac0d1ed8c9ebc34639a723d1de883cd26d05c7a3fb8fe0f74efda5642dff75a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bdb82cacc703f44df58f9060d66550d824974b771d1885259ec0288f90e332a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cac0d1ed8c9ebc34639a723d1de883cd26d05c7a3fb8fe0f74efda5642dff75a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:15:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:15:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cac0d1ed8c9ebc34639a723d1de883cd26d05c7a3fb8fe0f74efda5642dff75a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f4e46b7010e59973e29b9b49926b38759af3f9a6d1c15b48436e610e93a4774"} {"level":"info","ts":"2026-07-24T15:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cac0d1ed8c9ebc34639a723d1de883cd26d05c7a3fb8fe0f74efda5642dff75a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cac0d1ed8c9ebc34639a723d1de883cd26d05c7a3fb8fe0f74efda5642dff75a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:15:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:15:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cac0d1ed8c9ebc34639a723d1de883cd26d05c7a3fb8fe0f74efda5642dff75a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-24T15:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"cac0d1ed8c9ebc34639a723d1de883cd26d05c7a3fb8fe0f74efda5642dff75a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"cac0d1ed8c9ebc34639a723d1de883cd26d05c7a3fb8fe0f74efda5642dff75a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T15:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cac0d1ed8c9ebc34639a723d1de883cd26d05c7a3fb8fe0f74efda5642dff75a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T15:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bdb82cacc703f44df58f9060d66550d824974b771d1885259ec0288f90e332a5"} {"level":"debug","ts":"2026-07-24T15:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cac0d1ed8c9ebc34639a723d1de883cd26d05c7a3fb8fe0f74efda5642dff75a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:15:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:15:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cac0d1ed8c9ebc34639a723d1de883cd26d05c7a3fb8fe0f74efda5642dff75a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55a5d4ab21bb36f7f40978ce640f1e48428a71b01d8a07eff1fd4260ceb86991","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:15:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:15:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cac0d1ed8c9ebc34639a723d1de883cd26d05c7a3fb8fe0f74efda5642dff75a"} {"level":"info","ts":"2026-07-24T15:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55a5d4ab21bb36f7f40978ce640f1e48428a71b01d8a07eff1fd4260ceb86991","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cac0d1ed8c9ebc34639a723d1de883cd26d05c7a3fb8fe0f74efda5642dff75a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:15:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:15:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cac0d1ed8c9ebc34639a723d1de883cd26d05c7a3fb8fe0f74efda5642dff75a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55a5d4ab21bb36f7f40978ce640f1e48428a71b01d8a07eff1fd4260ceb86991"} {"level":"info","ts":"2026-07-24T15:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cac0d1ed8c9ebc34639a723d1de883cd26d05c7a3fb8fe0f74efda5642dff75a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c418244c8795aafcaa38df340a22943da5e6dc77f4f8c2d142afad2a76c0fc8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:15:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:15:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c418244c8795aafcaa38df340a22943da5e6dc77f4f8c2d142afad2a76c0fc8"} {"level":"info","ts":"2026-07-24T15:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c418244c8795aafcaa38df340a22943da5e6dc77f4f8c2d142afad2a76c0fc8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55a5d4ab21bb36f7f40978ce640f1e48428a71b01d8a07eff1fd4260ceb86991","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:15:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:15:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["55a5d4ab21bb36f7f40978ce640f1e48428a71b01d8a07eff1fd4260ceb86991"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55a5d4ab21bb36f7f40978ce640f1e48428a71b01d8a07eff1fd4260ceb86991","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cac0d1ed8c9ebc34639a723d1de883cd26d05c7a3fb8fe0f74efda5642dff75a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:15:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:15:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cac0d1ed8c9ebc34639a723d1de883cd26d05c7a3fb8fe0f74efda5642dff75a"} {"level":"info","ts":"2026-07-24T15:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cac0d1ed8c9ebc34639a723d1de883cd26d05c7a3fb8fe0f74efda5642dff75a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c418244c8795aafcaa38df340a22943da5e6dc77f4f8c2d142afad2a76c0fc8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:15:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:15:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c418244c8795aafcaa38df340a22943da5e6dc77f4f8c2d142afad2a76c0fc8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55a5d4ab21bb36f7f40978ce640f1e48428a71b01d8a07eff1fd4260ceb86991"} {"level":"info","ts":"2026-07-24T15:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c418244c8795aafcaa38df340a22943da5e6dc77f4f8c2d142afad2a76c0fc8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55a5d4ab21bb36f7f40978ce640f1e48428a71b01d8a07eff1fd4260ceb86991","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cac0d1ed8c9ebc34639a723d1de883cd26d05c7a3fb8fe0f74efda5642dff75a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:15:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:15:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cac0d1ed8c9ebc34639a723d1de883cd26d05c7a3fb8fe0f74efda5642dff75a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c418244c8795aafcaa38df340a22943da5e6dc77f4f8c2d142afad2a76c0fc8"} {"level":"info","ts":"2026-07-24T15:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cac0d1ed8c9ebc34639a723d1de883cd26d05c7a3fb8fe0f74efda5642dff75a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc9e49fff8b6b6ecba0aba7589c20d9f87edef7b0270ea29db56960b51047402","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:15:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:15:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cac0d1ed8c9ebc34639a723d1de883cd26d05c7a3fb8fe0f74efda5642dff75a"} {"level":"info","ts":"2026-07-24T15:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc9e49fff8b6b6ecba0aba7589c20d9f87edef7b0270ea29db56960b51047402","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c418244c8795aafcaa38df340a22943da5e6dc77f4f8c2d142afad2a76c0fc8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cac0d1ed8c9ebc34639a723d1de883cd26d05c7a3fb8fe0f74efda5642dff75a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc9e49fff8b6b6ecba0aba7589c20d9f87edef7b0270ea29db56960b51047402","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc9e49fff8b6b6ecba0aba7589c20d9f87edef7b0270ea29db56960b51047402","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T15:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55a5d4ab21bb36f7f40978ce640f1e48428a71b01d8a07eff1fd4260ceb86991"} {"level":"debug","ts":"2026-07-24T15:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc9e49fff8b6b6ecba0aba7589c20d9f87edef7b0270ea29db56960b51047402","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:15:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:15:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc9e49fff8b6b6ecba0aba7589c20d9f87edef7b0270ea29db56960b51047402","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T15:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc9e49fff8b6b6ecba0aba7589c20d9f87edef7b0270ea29db56960b51047402"} {"level":"debug","ts":"2026-07-24T15:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc9e49fff8b6b6ecba0aba7589c20d9f87edef7b0270ea29db56960b51047402","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:15:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:15:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc9e49fff8b6b6ecba0aba7589c20d9f87edef7b0270ea29db56960b51047402"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc9e49fff8b6b6ecba0aba7589c20d9f87edef7b0270ea29db56960b51047402","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5518b15a6b93af4667598497423f23a7abdc8dacc8dadf4e7709bd12013c9a1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:15:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:15:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c418244c8795aafcaa38df340a22943da5e6dc77f4f8c2d142afad2a76c0fc8"} {"level":"info","ts":"2026-07-24T15:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5518b15a6b93af4667598497423f23a7abdc8dacc8dadf4e7709bd12013c9a1d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc9e49fff8b6b6ecba0aba7589c20d9f87edef7b0270ea29db56960b51047402","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5518b15a6b93af4667598497423f23a7abdc8dacc8dadf4e7709bd12013c9a1d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc9e49fff8b6b6ecba0aba7589c20d9f87edef7b0270ea29db56960b51047402","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5518b15a6b93af4667598497423f23a7abdc8dacc8dadf4e7709bd12013c9a1d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T15:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cac0d1ed8c9ebc34639a723d1de883cd26d05c7a3fb8fe0f74efda5642dff75a"} {"level":"debug","ts":"2026-07-24T15:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5518b15a6b93af4667598497423f23a7abdc8dacc8dadf4e7709bd12013c9a1d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T15:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc9e49fff8b6b6ecba0aba7589c20d9f87edef7b0270ea29db56960b51047402"} {"level":"info","ts":"2026-07-24T15:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5518b15a6b93af4667598497423f23a7abdc8dacc8dadf4e7709bd12013c9a1d"} {"level":"debug","ts":"2026-07-24T15:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5518b15a6b93af4667598497423f23a7abdc8dacc8dadf4e7709bd12013c9a1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:15:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:15:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5518b15a6b93af4667598497423f23a7abdc8dacc8dadf4e7709bd12013c9a1d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5518b15a6b93af4667598497423f23a7abdc8dacc8dadf4e7709bd12013c9a1d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18a966da0354e42c2a13fed24e9e8a67e8e4aa4be5e7182a4c848c532ec8e3a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:15:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:15:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18a966da0354e42c2a13fed24e9e8a67e8e4aa4be5e7182a4c848c532ec8e3a2"} {"level":"info","ts":"2026-07-24T15:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18a966da0354e42c2a13fed24e9e8a67e8e4aa4be5e7182a4c848c532ec8e3a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5518b15a6b93af4667598497423f23a7abdc8dacc8dadf4e7709bd12013c9a1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:15:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:15:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5518b15a6b93af4667598497423f23a7abdc8dacc8dadf4e7709bd12013c9a1d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18a966da0354e42c2a13fed24e9e8a67e8e4aa4be5e7182a4c848c532ec8e3a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:15:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:15:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18a966da0354e42c2a13fed24e9e8a67e8e4aa4be5e7182a4c848c532ec8e3a2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5518b15a6b93af4667598497423f23a7abdc8dacc8dadf4e7709bd12013c9a1d"} {"level":"info","ts":"2026-07-24T15:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18a966da0354e42c2a13fed24e9e8a67e8e4aa4be5e7182a4c848c532ec8e3a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5518b15a6b93af4667598497423f23a7abdc8dacc8dadf4e7709bd12013c9a1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:15:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:15:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5518b15a6b93af4667598497423f23a7abdc8dacc8dadf4e7709bd12013c9a1d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18a966da0354e42c2a13fed24e9e8a67e8e4aa4be5e7182a4c848c532ec8e3a2"} {"level":"info","ts":"2026-07-24T15:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5518b15a6b93af4667598497423f23a7abdc8dacc8dadf4e7709bd12013c9a1d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18a966da0354e42c2a13fed24e9e8a67e8e4aa4be5e7182a4c848c532ec8e3a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5518b15a6b93af4667598497423f23a7abdc8dacc8dadf4e7709bd12013c9a1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:15:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:15:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5518b15a6b93af4667598497423f23a7abdc8dacc8dadf4e7709bd12013c9a1d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T15:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5518b15a6b93af4667598497423f23a7abdc8dacc8dadf4e7709bd12013c9a1d"} {"level":"debug","ts":"2026-07-24T15:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5518b15a6b93af4667598497423f23a7abdc8dacc8dadf4e7709bd12013c9a1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:15:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:15:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5518b15a6b93af4667598497423f23a7abdc8dacc8dadf4e7709bd12013c9a1d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5518b15a6b93af4667598497423f23a7abdc8dacc8dadf4e7709bd12013c9a1d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5518b15a6b93af4667598497423f23a7abdc8dacc8dadf4e7709bd12013c9a1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:15:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:15:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5518b15a6b93af4667598497423f23a7abdc8dacc8dadf4e7709bd12013c9a1d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18a966da0354e42c2a13fed24e9e8a67e8e4aa4be5e7182a4c848c532ec8e3a2"} {"level":"error","ts":"2026-07-24T15:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5518b15a6b93af4667598497423f23a7abdc8dacc8dadf4e7709bd12013c9a1d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5518b15a6b93af4667598497423f23a7abdc8dacc8dadf4e7709bd12013c9a1d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T15:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5518b15a6b93af4667598497423f23a7abdc8dacc8dadf4e7709bd12013c9a1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:15:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:15:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5518b15a6b93af4667598497423f23a7abdc8dacc8dadf4e7709bd12013c9a1d"} {"level":"info","ts":"2026-07-24T15:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5518b15a6b93af4667598497423f23a7abdc8dacc8dadf4e7709bd12013c9a1d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5518b15a6b93af4667598497423f23a7abdc8dacc8dadf4e7709bd12013c9a1d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5518b15a6b93af4667598497423f23a7abdc8dacc8dadf4e7709bd12013c9a1d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5518b15a6b93af4667598497423f23a7abdc8dacc8dadf4e7709bd12013c9a1d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5518b15a6b93af4667598497423f23a7abdc8dacc8dadf4e7709bd12013c9a1d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T15:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5518b15a6b93af4667598497423f23a7abdc8dacc8dadf4e7709bd12013c9a1d"} {"level":"debug","ts":"2026-07-24T15:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5518b15a6b93af4667598497423f23a7abdc8dacc8dadf4e7709bd12013c9a1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:15:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:15:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5518b15a6b93af4667598497423f23a7abdc8dacc8dadf4e7709bd12013c9a1d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5518b15a6b93af4667598497423f23a7abdc8dacc8dadf4e7709bd12013c9a1d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d2cf915d69ba96154d564a51e1489c9c13960b1582e0fd61a308b885e0b1e0c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:15:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:15:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d2cf915d69ba96154d564a51e1489c9c13960b1582e0fd61a308b885e0b1e0c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5518b15a6b93af4667598497423f23a7abdc8dacc8dadf4e7709bd12013c9a1d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d2cf915d69ba96154d564a51e1489c9c13960b1582e0fd61a308b885e0b1e0c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d2cf915d69ba96154d564a51e1489c9c13960b1582e0fd61a308b885e0b1e0c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T15:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d2cf915d69ba96154d564a51e1489c9c13960b1582e0fd61a308b885e0b1e0c"} {"level":"debug","ts":"2026-07-24T15:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d2cf915d69ba96154d564a51e1489c9c13960b1582e0fd61a308b885e0b1e0c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:15:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:15:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9d2cf915d69ba96154d564a51e1489c9c13960b1582e0fd61a308b885e0b1e0c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d2cf915d69ba96154d564a51e1489c9c13960b1582e0fd61a308b885e0b1e0c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d2cf915d69ba96154d564a51e1489c9c13960b1582e0fd61a308b885e0b1e0c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T15:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5518b15a6b93af4667598497423f23a7abdc8dacc8dadf4e7709bd12013c9a1d"} {"level":"info","ts":"2026-07-24T15:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d2cf915d69ba96154d564a51e1489c9c13960b1582e0fd61a308b885e0b1e0c"} {"level":"debug","ts":"2026-07-24T15:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fbe8444679bf28e22b7e878ad2c17b367da6b190180752e11dd69354da7a764f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:15:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:15:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fbe8444679bf28e22b7e878ad2c17b367da6b190180752e11dd69354da7a764f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fbe8444679bf28e22b7e878ad2c17b367da6b190180752e11dd69354da7a764f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:15:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:15:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fbe8444679bf28e22b7e878ad2c17b367da6b190180752e11dd69354da7a764f"} {"level":"info","ts":"2026-07-24T15:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fbe8444679bf28e22b7e878ad2c17b367da6b190180752e11dd69354da7a764f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fbe8444679bf28e22b7e878ad2c17b367da6b190180752e11dd69354da7a764f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:15:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:15:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-24T15:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"fbe8444679bf28e22b7e878ad2c17b367da6b190180752e11dd69354da7a764f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"fbe8444679bf28e22b7e878ad2c17b367da6b190180752e11dd69354da7a764f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T15:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fbe8444679bf28e22b7e878ad2c17b367da6b190180752e11dd69354da7a764f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fbe8444679bf28e22b7e878ad2c17b367da6b190180752e11dd69354da7a764f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T15:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fbe8444679bf28e22b7e878ad2c17b367da6b190180752e11dd69354da7a764f"} {"level":"info","ts":"2026-07-24T15:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fbe8444679bf28e22b7e878ad2c17b367da6b190180752e11dd69354da7a764f"} {"level":"debug","ts":"2026-07-24T15:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6369c93f61493a2d227cf6c9cd3a16361d53c4064707fa3bbd75ada145c423ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:15:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:15:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6369c93f61493a2d227cf6c9cd3a16361d53c4064707fa3bbd75ada145c423ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fbe8444679bf28e22b7e878ad2c17b367da6b190180752e11dd69354da7a764f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:15:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:15:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fbe8444679bf28e22b7e878ad2c17b367da6b190180752e11dd69354da7a764f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6369c93f61493a2d227cf6c9cd3a16361d53c4064707fa3bbd75ada145c423ad"} {"level":"info","ts":"2026-07-24T15:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fbe8444679bf28e22b7e878ad2c17b367da6b190180752e11dd69354da7a764f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6369c93f61493a2d227cf6c9cd3a16361d53c4064707fa3bbd75ada145c423ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fbe8444679bf28e22b7e878ad2c17b367da6b190180752e11dd69354da7a764f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T15:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6369c93f61493a2d227cf6c9cd3a16361d53c4064707fa3bbd75ada145c423ad"} {"level":"debug","ts":"2026-07-24T15:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6369c93f61493a2d227cf6c9cd3a16361d53c4064707fa3bbd75ada145c423ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:15:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:15:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6369c93f61493a2d227cf6c9cd3a16361d53c4064707fa3bbd75ada145c423ad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fbe8444679bf28e22b7e878ad2c17b367da6b190180752e11dd69354da7a764f"} {"level":"info","ts":"2026-07-24T15:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6369c93f61493a2d227cf6c9cd3a16361d53c4064707fa3bbd75ada145c423ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6369c93f61493a2d227cf6c9cd3a16361d53c4064707fa3bbd75ada145c423ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:15:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:15:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6369c93f61493a2d227cf6c9cd3a16361d53c4064707fa3bbd75ada145c423ad"} {"level":"info","ts":"2026-07-24T15:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6369c93f61493a2d227cf6c9cd3a16361d53c4064707fa3bbd75ada145c423ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6369c93f61493a2d227cf6c9cd3a16361d53c4064707fa3bbd75ada145c423ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6369c93f61493a2d227cf6c9cd3a16361d53c4064707fa3bbd75ada145c423ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b1ef7cbc9f4bd6212c3657be9cf2e8359d760550e0722cee4ced1d55b2cb2d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:15:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:15:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6369c93f61493a2d227cf6c9cd3a16361d53c4064707fa3bbd75ada145c423ad"} {"level":"info","ts":"2026-07-24T15:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b1ef7cbc9f4bd6212c3657be9cf2e8359d760550e0722cee4ced1d55b2cb2d4"} {"level":"info","ts":"2026-07-24T15:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b1ef7cbc9f4bd6212c3657be9cf2e8359d760550e0722cee4ced1d55b2cb2d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6369c93f61493a2d227cf6c9cd3a16361d53c4064707fa3bbd75ada145c423ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:15:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:15:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6369c93f61493a2d227cf6c9cd3a16361d53c4064707fa3bbd75ada145c423ad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6369c93f61493a2d227cf6c9cd3a16361d53c4064707fa3bbd75ada145c423ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b1ef7cbc9f4bd6212c3657be9cf2e8359d760550e0722cee4ced1d55b2cb2d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:15:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:15:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b1ef7cbc9f4bd6212c3657be9cf2e8359d760550e0722cee4ced1d55b2cb2d4"} {"level":"info","ts":"2026-07-24T15:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b1ef7cbc9f4bd6212c3657be9cf2e8359d760550e0722cee4ced1d55b2cb2d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6369c93f61493a2d227cf6c9cd3a16361d53c4064707fa3bbd75ada145c423ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:15:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:15:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6369c93f61493a2d227cf6c9cd3a16361d53c4064707fa3bbd75ada145c423ad"} {"level":"info","ts":"2026-07-24T15:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6369c93f61493a2d227cf6c9cd3a16361d53c4064707fa3bbd75ada145c423ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b1ef7cbc9f4bd6212c3657be9cf2e8359d760550e0722cee4ced1d55b2cb2d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6369c93f61493a2d227cf6c9cd3a16361d53c4064707fa3bbd75ada145c423ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:15:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:15:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6369c93f61493a2d227cf6c9cd3a16361d53c4064707fa3bbd75ada145c423ad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b1ef7cbc9f4bd6212c3657be9cf2e8359d760550e0722cee4ced1d55b2cb2d4"} {"level":"info","ts":"2026-07-24T15:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6369c93f61493a2d227cf6c9cd3a16361d53c4064707fa3bbd75ada145c423ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b1ef7cbc9f4bd6212c3657be9cf2e8359d760550e0722cee4ced1d55b2cb2d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:15:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:15:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7b1ef7cbc9f4bd6212c3657be9cf2e8359d760550e0722cee4ced1d55b2cb2d4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6369c93f61493a2d227cf6c9cd3a16361d53c4064707fa3bbd75ada145c423ad"} {"level":"info","ts":"2026-07-24T15:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6369c93f61493a2d227cf6c9cd3a16361d53c4064707fa3bbd75ada145c423ad"} {"level":"info","ts":"2026-07-24T15:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b1ef7cbc9f4bd6212c3657be9cf2e8359d760550e0722cee4ced1d55b2cb2d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6369c93f61493a2d227cf6c9cd3a16361d53c4064707fa3bbd75ada145c423ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b1ef7cbc9f4bd6212c3657be9cf2e8359d760550e0722cee4ced1d55b2cb2d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:15:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:15:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b1ef7cbc9f4bd6212c3657be9cf2e8359d760550e0722cee4ced1d55b2cb2d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b1ef7cbc9f4bd6212c3657be9cf2e8359d760550e0722cee4ced1d55b2cb2d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f957e3bd3c3b0b1dfb1fdd278d3ce047505cb12892ac673aa208a8c7d116cf8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:15:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:15:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b1ef7cbc9f4bd6212c3657be9cf2e8359d760550e0722cee4ced1d55b2cb2d4"} {"level":"info","ts":"2026-07-24T15:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f957e3bd3c3b0b1dfb1fdd278d3ce047505cb12892ac673aa208a8c7d116cf8"} {"level":"info","ts":"2026-07-24T15:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f957e3bd3c3b0b1dfb1fdd278d3ce047505cb12892ac673aa208a8c7d116cf8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b1ef7cbc9f4bd6212c3657be9cf2e8359d760550e0722cee4ced1d55b2cb2d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f957e3bd3c3b0b1dfb1fdd278d3ce047505cb12892ac673aa208a8c7d116cf8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:15:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:15:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f957e3bd3c3b0b1dfb1fdd278d3ce047505cb12892ac673aa208a8c7d116cf8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f957e3bd3c3b0b1dfb1fdd278d3ce047505cb12892ac673aa208a8c7d116cf8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f957e3bd3c3b0b1dfb1fdd278d3ce047505cb12892ac673aa208a8c7d116cf8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:15:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:15:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f957e3bd3c3b0b1dfb1fdd278d3ce047505cb12892ac673aa208a8c7d116cf8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b1ef7cbc9f4bd6212c3657be9cf2e8359d760550e0722cee4ced1d55b2cb2d4"} {"level":"error","ts":"2026-07-24T15:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5f957e3bd3c3b0b1dfb1fdd278d3ce047505cb12892ac673aa208a8c7d116cf8","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5f957e3bd3c3b0b1dfb1fdd278d3ce047505cb12892ac673aa208a8c7d116cf8\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T15:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b1ef7cbc9f4bd6212c3657be9cf2e8359d760550e0722cee4ced1d55b2cb2d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:15:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:15:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7b1ef7cbc9f4bd6212c3657be9cf2e8359d760550e0722cee4ced1d55b2cb2d4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f957e3bd3c3b0b1dfb1fdd278d3ce047505cb12892ac673aa208a8c7d116cf8"} {"level":"info","ts":"2026-07-24T15:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b1ef7cbc9f4bd6212c3657be9cf2e8359d760550e0722cee4ced1d55b2cb2d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f957e3bd3c3b0b1dfb1fdd278d3ce047505cb12892ac673aa208a8c7d116cf8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b1ef7cbc9f4bd6212c3657be9cf2e8359d760550e0722cee4ced1d55b2cb2d4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T15:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b1ef7cbc9f4bd6212c3657be9cf2e8359d760550e0722cee4ced1d55b2cb2d4"} {"level":"debug","ts":"2026-07-24T15:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"687b1b4673238fc566dcefc20e45a72a194dd689359a603228fe79ecd6fdfc19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:15:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:15:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"687b1b4673238fc566dcefc20e45a72a194dd689359a603228fe79ecd6fdfc19","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"687b1b4673238fc566dcefc20e45a72a194dd689359a603228fe79ecd6fdfc19","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T15:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/687b1b4673238fc566dcefc20e45a72a194dd689359a603228fe79ecd6fdfc19"} {"level":"debug","ts":"2026-07-24T15:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"687b1b4673238fc566dcefc20e45a72a194dd689359a603228fe79ecd6fdfc19","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T15:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/687b1b4673238fc566dcefc20e45a72a194dd689359a603228fe79ecd6fdfc19"} {"level":"debug","ts":"2026-07-24T15:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"687b1b4673238fc566dcefc20e45a72a194dd689359a603228fe79ecd6fdfc19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:15:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:15:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["687b1b4673238fc566dcefc20e45a72a194dd689359a603228fe79ecd6fdfc19"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"687b1b4673238fc566dcefc20e45a72a194dd689359a603228fe79ecd6fdfc19","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"687b1b4673238fc566dcefc20e45a72a194dd689359a603228fe79ecd6fdfc19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:15:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:15:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"687b1b4673238fc566dcefc20e45a72a194dd689359a603228fe79ecd6fdfc19","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"687b1b4673238fc566dcefc20e45a72a194dd689359a603228fe79ecd6fdfc19","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"687b1b4673238fc566dcefc20e45a72a194dd689359a603228fe79ecd6fdfc19","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T15:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/687b1b4673238fc566dcefc20e45a72a194dd689359a603228fe79ecd6fdfc19"} {"level":"debug","ts":"2026-07-24T15:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"338996124ecc563b9759ccd16edb5488364726a79c5b018344725e0f7913a332","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:15:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:15:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"338996124ecc563b9759ccd16edb5488364726a79c5b018344725e0f7913a332","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"687b1b4673238fc566dcefc20e45a72a194dd689359a603228fe79ecd6fdfc19","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd525089122835153f5b7ca343aac027dfa6ac8c395da9d034337d7c6737560","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:15:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:15:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/687b1b4673238fc566dcefc20e45a72a194dd689359a603228fe79ecd6fdfc19"} {"level":"info","ts":"2026-07-24T15:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd525089122835153f5b7ca343aac027dfa6ac8c395da9d034337d7c6737560","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"338996124ecc563b9759ccd16edb5488364726a79c5b018344725e0f7913a332","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:15:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:15:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"338996124ecc563b9759ccd16edb5488364726a79c5b018344725e0f7913a332","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8578b89f40de6e3cfc0f84f19758be8ff4d5ebeee2786225d13dc2249a4023ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:15:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:15:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/338996124ecc563b9759ccd16edb5488364726a79c5b018344725e0f7913a332"} {"level":"info","ts":"2026-07-24T15:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8578b89f40de6e3cfc0f84f19758be8ff4d5ebeee2786225d13dc2249a4023ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd525089122835153f5b7ca343aac027dfa6ac8c395da9d034337d7c6737560","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:15:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:15:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd525089122835153f5b7ca343aac027dfa6ac8c395da9d034337d7c6737560"} {"level":"info","ts":"2026-07-24T15:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd525089122835153f5b7ca343aac027dfa6ac8c395da9d034337d7c6737560","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"338996124ecc563b9759ccd16edb5488364726a79c5b018344725e0f7913a332","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:15:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:15:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["338996124ecc563b9759ccd16edb5488364726a79c5b018344725e0f7913a332"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8578b89f40de6e3cfc0f84f19758be8ff4d5ebeee2786225d13dc2249a4023ab"} {"level":"info","ts":"2026-07-24T15:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/338996124ecc563b9759ccd16edb5488364726a79c5b018344725e0f7913a332"} {"level":"info","ts":"2026-07-24T15:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"338996124ecc563b9759ccd16edb5488364726a79c5b018344725e0f7913a332","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"687b1b4673238fc566dcefc20e45a72a194dd689359a603228fe79ecd6fdfc19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:15:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:15:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["687b1b4673238fc566dcefc20e45a72a194dd689359a603228fe79ecd6fdfc19"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd525089122835153f5b7ca343aac027dfa6ac8c395da9d034337d7c6737560"} {"level":"info","ts":"2026-07-24T15:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a475b67fc0171176cf1b95af1b4eedf3fdee92674df8efc4e08205be8a14044a"} {"level":"info","ts":"2026-07-24T15:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"687b1b4673238fc566dcefc20e45a72a194dd689359a603228fe79ecd6fdfc19","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8578b89f40de6e3cfc0f84f19758be8ff4d5ebeee2786225d13dc2249a4023ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:15:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:15:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8578b89f40de6e3cfc0f84f19758be8ff4d5ebeee2786225d13dc2249a4023ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/92cd0ac2134c10a05f3753aa20b6f9036c14bf3ae46456af80833dc47d1241ab"} {"level":"info","ts":"2026-07-24T15:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/338996124ecc563b9759ccd16edb5488364726a79c5b018344725e0f7913a332"} {"level":"info","ts":"2026-07-24T15:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/687b1b4673238fc566dcefc20e45a72a194dd689359a603228fe79ecd6fdfc19"} {"level":"info","ts":"2026-07-24T15:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8578b89f40de6e3cfc0f84f19758be8ff4d5ebeee2786225d13dc2249a4023ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd525089122835153f5b7ca343aac027dfa6ac8c395da9d034337d7c6737560","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:15:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:15:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dd525089122835153f5b7ca343aac027dfa6ac8c395da9d034337d7c6737560"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6ba89700f005fe4ef793cc551711054accbe4b1aab0e9d7ef2fe973b8424e5a"} {"level":"info","ts":"2026-07-24T15:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd525089122835153f5b7ca343aac027dfa6ac8c395da9d034337d7c6737560","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T15:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b63e986f099db6dded059b613fdc61522ac42647ee6624458f88a0fe4a80b4c6"} {"level":"debug","ts":"2026-07-24T15:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a475b67fc0171176cf1b95af1b4eedf3fdee92674df8efc4e08205be8a14044a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:15:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:15:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a475b67fc0171176cf1b95af1b4eedf3fdee92674df8efc4e08205be8a14044a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8578b89f40de6e3cfc0f84f19758be8ff4d5ebeee2786225d13dc2249a4023ab"} {"level":"info","ts":"2026-07-24T15:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a475b67fc0171176cf1b95af1b4eedf3fdee92674df8efc4e08205be8a14044a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"92cd0ac2134c10a05f3753aa20b6f9036c14bf3ae46456af80833dc47d1241ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:15:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:15:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["92cd0ac2134c10a05f3753aa20b6f9036c14bf3ae46456af80833dc47d1241ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65bdd67e044e7dcff689f7d66d743e67ce890c40664cf9ad5a7149b75c30d0b1"} {"level":"info","ts":"2026-07-24T15:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6771e3f926351e7e7eea11533db2ea5dd4b06837db63431c8ca754ee0b6658f9"} {"level":"info","ts":"2026-07-24T15:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"92cd0ac2134c10a05f3753aa20b6f9036c14bf3ae46456af80833dc47d1241ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"338996124ecc563b9759ccd16edb5488364726a79c5b018344725e0f7913a332","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"687b1b4673238fc566dcefc20e45a72a194dd689359a603228fe79ecd6fdfc19","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6ba89700f005fe4ef793cc551711054accbe4b1aab0e9d7ef2fe973b8424e5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:15:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:15:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b6ba89700f005fe4ef793cc551711054accbe4b1aab0e9d7ef2fe973b8424e5a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd525089122835153f5b7ca343aac027dfa6ac8c395da9d034337d7c6737560"} {"level":"info","ts":"2026-07-24T15:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a475b67fc0171176cf1b95af1b4eedf3fdee92674df8efc4e08205be8a14044a"} {"level":"info","ts":"2026-07-24T15:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6ba89700f005fe4ef793cc551711054accbe4b1aab0e9d7ef2fe973b8424e5a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b63e986f099db6dded059b613fdc61522ac42647ee6624458f88a0fe4a80b4c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:15:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:15:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b63e986f099db6dded059b613fdc61522ac42647ee6624458f88a0fe4a80b4c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/92cd0ac2134c10a05f3753aa20b6f9036c14bf3ae46456af80833dc47d1241ab"} {"level":"info","ts":"2026-07-24T15:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6ba89700f005fe4ef793cc551711054accbe4b1aab0e9d7ef2fe973b8424e5a"} {"level":"info","ts":"2026-07-24T15:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b63e986f099db6dded059b613fdc61522ac42647ee6624458f88a0fe4a80b4c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8578b89f40de6e3cfc0f84f19758be8ff4d5ebeee2786225d13dc2249a4023ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65bdd67e044e7dcff689f7d66d743e67ce890c40664cf9ad5a7149b75c30d0b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:15:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:15:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["65bdd67e044e7dcff689f7d66d743e67ce890c40664cf9ad5a7149b75c30d0b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b63e986f099db6dded059b613fdc61522ac42647ee6624458f88a0fe4a80b4c6"} {"level":"info","ts":"2026-07-24T15:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65bdd67e044e7dcff689f7d66d743e67ce890c40664cf9ad5a7149b75c30d0b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6771e3f926351e7e7eea11533db2ea5dd4b06837db63431c8ca754ee0b6658f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:15:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:15:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6771e3f926351e7e7eea11533db2ea5dd4b06837db63431c8ca754ee0b6658f9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65bdd67e044e7dcff689f7d66d743e67ce890c40664cf9ad5a7149b75c30d0b1"} {"level":"info","ts":"2026-07-24T15:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6771e3f926351e7e7eea11533db2ea5dd4b06837db63431c8ca754ee0b6658f9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd525089122835153f5b7ca343aac027dfa6ac8c395da9d034337d7c6737560","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a475b67fc0171176cf1b95af1b4eedf3fdee92674df8efc4e08205be8a14044a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"92cd0ac2134c10a05f3753aa20b6f9036c14bf3ae46456af80833dc47d1241ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6ba89700f005fe4ef793cc551711054accbe4b1aab0e9d7ef2fe973b8424e5a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b63e986f099db6dded059b613fdc61522ac42647ee6624458f88a0fe4a80b4c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65bdd67e044e7dcff689f7d66d743e67ce890c40664cf9ad5a7149b75c30d0b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6771e3f926351e7e7eea11533db2ea5dd4b06837db63431c8ca754ee0b6658f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:15:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:15:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6771e3f926351e7e7eea11533db2ea5dd4b06837db63431c8ca754ee0b6658f9"} {"level":"info","ts":"2026-07-24T15:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6771e3f926351e7e7eea11533db2ea5dd4b06837db63431c8ca754ee0b6658f9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6771e3f926351e7e7eea11533db2ea5dd4b06837db63431c8ca754ee0b6658f9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6771e3f926351e7e7eea11533db2ea5dd4b06837db63431c8ca754ee0b6658f9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T15:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6771e3f926351e7e7eea11533db2ea5dd4b06837db63431c8ca754ee0b6658f9"} {"level":"debug","ts":"2026-07-24T15:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6771e3f926351e7e7eea11533db2ea5dd4b06837db63431c8ca754ee0b6658f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:15:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:15:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6771e3f926351e7e7eea11533db2ea5dd4b06837db63431c8ca754ee0b6658f9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6771e3f926351e7e7eea11533db2ea5dd4b06837db63431c8ca754ee0b6658f9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6771e3f926351e7e7eea11533db2ea5dd4b06837db63431c8ca754ee0b6658f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:15:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:15:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6771e3f926351e7e7eea11533db2ea5dd4b06837db63431c8ca754ee0b6658f9"} {"level":"info","ts":"2026-07-24T15:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6771e3f926351e7e7eea11533db2ea5dd4b06837db63431c8ca754ee0b6658f9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6771e3f926351e7e7eea11533db2ea5dd4b06837db63431c8ca754ee0b6658f9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6771e3f926351e7e7eea11533db2ea5dd4b06837db63431c8ca754ee0b6658f9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T15:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6771e3f926351e7e7eea11533db2ea5dd4b06837db63431c8ca754ee0b6658f9"} {"level":"debug","ts":"2026-07-24T15:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6771e3f926351e7e7eea11533db2ea5dd4b06837db63431c8ca754ee0b6658f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:15:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:15:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6771e3f926351e7e7eea11533db2ea5dd4b06837db63431c8ca754ee0b6658f9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6771e3f926351e7e7eea11533db2ea5dd4b06837db63431c8ca754ee0b6658f9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6771e3f926351e7e7eea11533db2ea5dd4b06837db63431c8ca754ee0b6658f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:15:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:15:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6771e3f926351e7e7eea11533db2ea5dd4b06837db63431c8ca754ee0b6658f9"} {"level":"info","ts":"2026-07-24T15:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6771e3f926351e7e7eea11533db2ea5dd4b06837db63431c8ca754ee0b6658f9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6771e3f926351e7e7eea11533db2ea5dd4b06837db63431c8ca754ee0b6658f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:15:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:15:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6771e3f926351e7e7eea11533db2ea5dd4b06837db63431c8ca754ee0b6658f9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6771e3f926351e7e7eea11533db2ea5dd4b06837db63431c8ca754ee0b6658f9"} {"level":"info","ts":"2026-07-24T15:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6771e3f926351e7e7eea11533db2ea5dd4b06837db63431c8ca754ee0b6658f9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6771e3f926351e7e7eea11533db2ea5dd4b06837db63431c8ca754ee0b6658f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:15:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:15:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6771e3f926351e7e7eea11533db2ea5dd4b06837db63431c8ca754ee0b6658f9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6771e3f926351e7e7eea11533db2ea5dd4b06837db63431c8ca754ee0b6658f9"} {"level":"error","ts":"2026-07-24T15:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6771e3f926351e7e7eea11533db2ea5dd4b06837db63431c8ca754ee0b6658f9","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6771e3f926351e7e7eea11533db2ea5dd4b06837db63431c8ca754ee0b6658f9\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T15:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6771e3f926351e7e7eea11533db2ea5dd4b06837db63431c8ca754ee0b6658f9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6771e3f926351e7e7eea11533db2ea5dd4b06837db63431c8ca754ee0b6658f9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T15:15:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d339a234-c1bb-4a6a-8842-69ef7d0ff996","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:59952","PortSpecifier":{"PortValue":59952}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d339a234-c1bb-4a6a-8842-69ef7d0ff996","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-dc7d81.apps.3be3295e-9019-4b6b-9df8-99ce19d48613.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T15:15:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d339a234-c1bb-4a6a-8842-69ef7d0ff996","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:59952","PortSpecifier":{"PortValue":59952}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784906115,"nanos":737235591},"http":{"id":"d339a234-c1bb-4a6a-8842-69ef7d0ff996","method":"POST","headers":{":authority":"e2e-shared-a-dc7d81.apps.3be3295e-9019-4b6b-9df8-99ce19d48613.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T15:15:15Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d339a234-c1bb-4a6a-8842-69ef7d0ff996","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T15:15:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d339a234-c1bb-4a6a-8842-69ef7d0ff996","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e9103260-9a05-4d99-8fa1-24683f35cf9c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac7166a7-f0ef-4ddf-98c5-a70fe2accb13"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/99ce19d48613"]}} {"level":"debug","ts":"2026-07-24T15:15:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d339a234-c1bb-4a6a-8842-69ef7d0ff996","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/99ce19d48613"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac7166a7-f0ef-4ddf-98c5-a70fe2accb13"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e9103260-9a05-4d99-8fa1-24683f35cf9c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"09bae11e466c1b7fd4a4390697823bdeb809c77799dcbe3c253ff8186111edd5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.73:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-dc7d81.apps.3be3295e-9019-4b6b-9df8-99ce19d48613.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T15:15:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d339a234-c1bb-4a6a-8842-69ef7d0ff996","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T15:15:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d339a234-c1bb-4a6a-8842-69ef7d0ff996","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T15:15:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d339a234-c1bb-4a6a-8842-69ef7d0ff996","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-dc7d81/sub-test-model-dc7d81\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-dc7d81/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T15:15:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d339a234-c1bb-4a6a-8842-69ef7d0ff996","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T15:15:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d339a234-c1bb-4a6a-8842-69ef7d0ff996","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T15:15:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d339a234-c1bb-4a6a-8842-69ef7d0ff996","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-24T15:15:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d339a234-c1bb-4a6a-8842-69ef7d0ff996","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T15:15:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d339a234-c1bb-4a6a-8842-69ef7d0ff996","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T15:15:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9b644938-5b6c-44c4-b511-175e6876fb8f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:36176","PortSpecifier":{"PortValue":36176}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9b644938-5b6c-44c4-b511-175e6876fb8f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-8ea489.apps.3be3295e-9019-4b6b-9df8-99ce19d48613.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T15:15:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9b644938-5b6c-44c4-b511-175e6876fb8f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:36176","PortSpecifier":{"PortValue":36176}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784906115,"nanos":784646677},"http":{"id":"9b644938-5b6c-44c4-b511-175e6876fb8f","method":"POST","headers":{":authority":"e2e-shared-b-8ea489.apps.3be3295e-9019-4b6b-9df8-99ce19d48613.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T15:15:15Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9b644938-5b6c-44c4-b511-175e6876fb8f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T15:15:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9b644938-5b6c-44c4-b511-175e6876fb8f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e9103260-9a05-4d99-8fa1-24683f35cf9c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac7166a7-f0ef-4ddf-98c5-a70fe2accb13"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/99ce19d48613"]}} {"level":"debug","ts":"2026-07-24T15:15:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9b644938-5b6c-44c4-b511-175e6876fb8f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/99ce19d48613"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac7166a7-f0ef-4ddf-98c5-a70fe2accb13"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e9103260-9a05-4d99-8fa1-24683f35cf9c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3c418244c8795aafcaa38df340a22943da5e6dc77f4f8c2d142afad2a76c0fc8"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.76:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-8ea489.apps.3be3295e-9019-4b6b-9df8-99ce19d48613.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T15:15:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9b644938-5b6c-44c4-b511-175e6876fb8f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T15:15:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9b644938-5b6c-44c4-b511-175e6876fb8f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T15:15:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9b644938-5b6c-44c4-b511-175e6876fb8f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-8ea489/sub-test-model-8ea489\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-8ea489/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T15:15:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9b644938-5b6c-44c4-b511-175e6876fb8f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T15:15:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9b644938-5b6c-44c4-b511-175e6876fb8f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T15:15:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9b644938-5b6c-44c4-b511-175e6876fb8f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-24T15:15:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9b644938-5b6c-44c4-b511-175e6876fb8f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T15:15:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9b644938-5b6c-44c4-b511-175e6876fb8f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T15:15:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"be0d18f8-7113-4d45-968f-b07c9389533f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:59960","PortSpecifier":{"PortValue":59960}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"be0d18f8-7113-4d45-968f-b07c9389533f","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-dc7d81.apps.3be3295e-9019-4b6b-9df8-99ce19d48613.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T15:15:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"be0d18f8-7113-4d45-968f-b07c9389533f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:59960","PortSpecifier":{"PortValue":59960}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784906115,"nanos":822256590},"http":{"id":"be0d18f8-7113-4d45-968f-b07c9389533f","method":"GET","headers":{":authority":"e2e-shared-a-dc7d81.apps.3be3295e-9019-4b6b-9df8-99ce19d48613.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T15:15:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"be0d18f8-7113-4d45-968f-b07c9389533f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-zi2ZYS92A6rMH6hi_lBcAczyNe0nhJTMNinUfuGi8JoGWmQITaetjLcmlKaS"} {"level":"debug","ts":"2026-07-24T15:15:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"be0d18f8-7113-4d45-968f-b07c9389533f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-dc7d81.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-zi2ZYS92A6rMH6hi_lBcAczyNe0nhJTMNinUfuGi8JoGWmQITaetjLcmlKaS\"}"} {"level":"debug","ts":"2026-07-24T15:15:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"be0d18f8-7113-4d45-968f-b07c9389533f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-dc7d81.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"2a9ab0a6-167c-4fd9-8e65-2b2725043ed1","keyName":"e2e-sub-iso-19cc71","subscription":"e2e-a-only-6511b8","tenant":"e2e-shared-a-dc7d81","userId":"2a9ab0a6-167c-4fd9-8e65-2b2725043ed1","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T15:15:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"be0d18f8-7113-4d45-968f-b07c9389533f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T15:15:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"be0d18f8-7113-4d45-968f-b07c9389533f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T15:15:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"be0d18f8-7113-4d45-968f-b07c9389533f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T15:15:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"be0d18f8-7113-4d45-968f-b07c9389533f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-dc7d81/sub-test-model-dc7d81\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-dc7d81/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T15:15:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"be0d18f8-7113-4d45-968f-b07c9389533f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-24T15:15:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"be0d18f8-7113-4d45-968f-b07c9389533f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-6511b8"} {"level":"debug","ts":"2026-07-24T15:15:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"be0d18f8-7113-4d45-968f-b07c9389533f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T15:15:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"be0d18f8-7113-4d45-968f-b07c9389533f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-24T15:15:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"be0d18f8-7113-4d45-968f-b07c9389533f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T15:15:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"be0d18f8-7113-4d45-968f-b07c9389533f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T15:15:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6b1351ff-dc1f-4b41-a990-6a0156b49761","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:36180","PortSpecifier":{"PortValue":36180}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6b1351ff-dc1f-4b41-a990-6a0156b49761","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-8ea489.apps.3be3295e-9019-4b6b-9df8-99ce19d48613.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T15:15:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6b1351ff-dc1f-4b41-a990-6a0156b49761","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:36180","PortSpecifier":{"PortValue":36180}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784906115,"nanos":853002587},"http":{"id":"6b1351ff-dc1f-4b41-a990-6a0156b49761","method":"GET","headers":{":authority":"e2e-shared-b-8ea489.apps.3be3295e-9019-4b6b-9df8-99ce19d48613.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T15:15:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6b1351ff-dc1f-4b41-a990-6a0156b49761","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-16BNl6BpKBC1xkoWC_33mGqFm4qdlTWLVnT4etOqs4VOXKnXTTg7xYrRyQIHp"} {"level":"debug","ts":"2026-07-24T15:15:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6b1351ff-dc1f-4b41-a990-6a0156b49761","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-8ea489.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-16BNl6BpKBC1xkoWC_33mGqFm4qdlTWLVnT4etOqs4VOXKnXTTg7xYrRyQIHp\"}"} {"level":"debug","ts":"2026-07-24T15:15:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6b1351ff-dc1f-4b41-a990-6a0156b49761","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-8ea489.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1bbe221f-1642-406c-a34e-6a303239c66b","keyName":"e2e-sub-iso-db4e8e","subscription":"e2e-b-only-6511b8","tenant":"e2e-shared-b-8ea489","userId":"1bbe221f-1642-406c-a34e-6a303239c66b","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T15:15:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6b1351ff-dc1f-4b41-a990-6a0156b49761","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T15:15:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6b1351ff-dc1f-4b41-a990-6a0156b49761","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T15:15:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6b1351ff-dc1f-4b41-a990-6a0156b49761","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T15:15:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6b1351ff-dc1f-4b41-a990-6a0156b49761","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-8ea489/sub-test-model-8ea489\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-8ea489/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T15:15:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6b1351ff-dc1f-4b41-a990-6a0156b49761","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T15:15:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6b1351ff-dc1f-4b41-a990-6a0156b49761","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T15:15:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6b1351ff-dc1f-4b41-a990-6a0156b49761","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-6511b8"} {"level":"debug","ts":"2026-07-24T15:15:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6b1351ff-dc1f-4b41-a990-6a0156b49761","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-24T15:15:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6b1351ff-dc1f-4b41-a990-6a0156b49761","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T15:15:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6b1351ff-dc1f-4b41-a990-6a0156b49761","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T15:15:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"567b231d-f02c-4e2f-b67a-9e6b595ef383","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:41868","PortSpecifier":{"PortValue":41868}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"567b231d-f02c-4e2f-b67a-9e6b595ef383","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-dc7d81.apps.3be3295e-9019-4b6b-9df8-99ce19d48613.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T15:15:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"567b231d-f02c-4e2f-b67a-9e6b595ef383","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:41868","PortSpecifier":{"PortValue":41868}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784906130,"nanos":322352552},"http":{"id":"567b231d-f02c-4e2f-b67a-9e6b595ef383","method":"POST","headers":{":authority":"e2e-shared-a-dc7d81.apps.3be3295e-9019-4b6b-9df8-99ce19d48613.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T15:15:30Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"567b231d-f02c-4e2f-b67a-9e6b595ef383","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T15:15:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"567b231d-f02c-4e2f-b67a-9e6b595ef383","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e9103260-9a05-4d99-8fa1-24683f35cf9c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac7166a7-f0ef-4ddf-98c5-a70fe2accb13"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/99ce19d48613"]}} {"level":"debug","ts":"2026-07-24T15:15:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"567b231d-f02c-4e2f-b67a-9e6b595ef383","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/99ce19d48613"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac7166a7-f0ef-4ddf-98c5-a70fe2accb13"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e9103260-9a05-4d99-8fa1-24683f35cf9c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"09bae11e466c1b7fd4a4390697823bdeb809c77799dcbe3c253ff8186111edd5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.73:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-dc7d81.apps.3be3295e-9019-4b6b-9df8-99ce19d48613.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T15:15:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"567b231d-f02c-4e2f-b67a-9e6b595ef383","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T15:15:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"567b231d-f02c-4e2f-b67a-9e6b595ef383","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T15:15:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"567b231d-f02c-4e2f-b67a-9e6b595ef383","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-dc7d81/sub-test-model-dc7d81\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-dc7d81/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T15:15:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"567b231d-f02c-4e2f-b67a-9e6b595ef383","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T15:15:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"567b231d-f02c-4e2f-b67a-9e6b595ef383","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T15:15:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"567b231d-f02c-4e2f-b67a-9e6b595ef383","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-24T15:15:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"567b231d-f02c-4e2f-b67a-9e6b595ef383","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T15:15:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"567b231d-f02c-4e2f-b67a-9e6b595ef383","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T15:15:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fbea17d0-26c8-4097-ac82-bb0f2c0da66e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:52464","PortSpecifier":{"PortValue":52464}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fbea17d0-26c8-4097-ac82-bb0f2c0da66e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-8ea489.apps.3be3295e-9019-4b6b-9df8-99ce19d48613.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T15:15:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fbea17d0-26c8-4097-ac82-bb0f2c0da66e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:52464","PortSpecifier":{"PortValue":52464}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784906130,"nanos":359968519},"http":{"id":"fbea17d0-26c8-4097-ac82-bb0f2c0da66e","method":"POST","headers":{":authority":"e2e-shared-b-8ea489.apps.3be3295e-9019-4b6b-9df8-99ce19d48613.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T15:15:30Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fbea17d0-26c8-4097-ac82-bb0f2c0da66e","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T15:15:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fbea17d0-26c8-4097-ac82-bb0f2c0da66e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e9103260-9a05-4d99-8fa1-24683f35cf9c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac7166a7-f0ef-4ddf-98c5-a70fe2accb13"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/99ce19d48613"]}} {"level":"debug","ts":"2026-07-24T15:15:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fbea17d0-26c8-4097-ac82-bb0f2c0da66e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/99ce19d48613"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac7166a7-f0ef-4ddf-98c5-a70fe2accb13"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e9103260-9a05-4d99-8fa1-24683f35cf9c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3c418244c8795aafcaa38df340a22943da5e6dc77f4f8c2d142afad2a76c0fc8"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.76:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-8ea489.apps.3be3295e-9019-4b6b-9df8-99ce19d48613.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T15:15:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fbea17d0-26c8-4097-ac82-bb0f2c0da66e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T15:15:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fbea17d0-26c8-4097-ac82-bb0f2c0da66e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T15:15:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fbea17d0-26c8-4097-ac82-bb0f2c0da66e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-8ea489/sub-test-model-8ea489\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-8ea489/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T15:15:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fbea17d0-26c8-4097-ac82-bb0f2c0da66e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T15:15:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fbea17d0-26c8-4097-ac82-bb0f2c0da66e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T15:15:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fbea17d0-26c8-4097-ac82-bb0f2c0da66e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-24T15:15:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fbea17d0-26c8-4097-ac82-bb0f2c0da66e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T15:15:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fbea17d0-26c8-4097-ac82-bb0f2c0da66e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T15:15:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"170ace22-9cc4-4138-8079-fb5cf3ba161f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:41876","PortSpecifier":{"PortValue":41876}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"170ace22-9cc4-4138-8079-fb5cf3ba161f","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-dc7d81.apps.3be3295e-9019-4b6b-9df8-99ce19d48613.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T15:15:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"170ace22-9cc4-4138-8079-fb5cf3ba161f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:41876","PortSpecifier":{"PortValue":41876}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784906130,"nanos":397838017},"http":{"id":"170ace22-9cc4-4138-8079-fb5cf3ba161f","method":"POST","headers":{":authority":"e2e-shared-a-dc7d81.apps.3be3295e-9019-4b6b-9df8-99ce19d48613.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T15:15:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"170ace22-9cc4-4138-8079-fb5cf3ba161f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1NrErrMC8da9LqrlT_vVkyBfNYzYHaht32OUz1TEowflRSnaNJZBArAQeqRCH"} {"level":"debug","ts":"2026-07-24T15:15:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"170ace22-9cc4-4138-8079-fb5cf3ba161f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-dc7d81.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1NrErrMC8da9LqrlT_vVkyBfNYzYHaht32OUz1TEowflRSnaNJZBArAQeqRCH\"}"} {"level":"debug","ts":"2026-07-24T15:15:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"170ace22-9cc4-4138-8079-fb5cf3ba161f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-dc7d81.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"898e3dce-1fbd-477f-918e-409491693d7e","keyName":"e2e-sub-iso-0b2b21","subscription":"e2e-shared-sub-a718fc","tenant":"e2e-shared-a-dc7d81","userId":"898e3dce-1fbd-477f-918e-409491693d7e","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T15:15:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"170ace22-9cc4-4138-8079-fb5cf3ba161f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T15:15:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"170ace22-9cc4-4138-8079-fb5cf3ba161f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T15:15:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"170ace22-9cc4-4138-8079-fb5cf3ba161f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T15:15:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"170ace22-9cc4-4138-8079-fb5cf3ba161f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-dc7d81/sub-test-model-dc7d81\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-dc7d81/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T15:15:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"170ace22-9cc4-4138-8079-fb5cf3ba161f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-24T15:15:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"170ace22-9cc4-4138-8079-fb5cf3ba161f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-a718fc"} {"level":"debug","ts":"2026-07-24T15:15:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"170ace22-9cc4-4138-8079-fb5cf3ba161f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T15:15:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"170ace22-9cc4-4138-8079-fb5cf3ba161f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-24T15:15:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"170ace22-9cc4-4138-8079-fb5cf3ba161f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T15:15:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"170ace22-9cc4-4138-8079-fb5cf3ba161f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T15:15:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"88097313-19a9-43c0-a6d1-85a6b9a9335a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:52476","PortSpecifier":{"PortValue":52476}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"88097313-19a9-43c0-a6d1-85a6b9a9335a","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-8ea489.apps.3be3295e-9019-4b6b-9df8-99ce19d48613.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T15:15:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"88097313-19a9-43c0-a6d1-85a6b9a9335a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:52476","PortSpecifier":{"PortValue":52476}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784906130,"nanos":427960832},"http":{"id":"88097313-19a9-43c0-a6d1-85a6b9a9335a","method":"POST","headers":{":authority":"e2e-shared-b-8ea489.apps.3be3295e-9019-4b6b-9df8-99ce19d48613.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T15:15:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"88097313-19a9-43c0-a6d1-85a6b9a9335a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-11VpuYoNepWlyX3aD_1JYt2b3ip8cbrhMOqD3ZtD17kC3l0aRnaw7y41ztNO6"} {"level":"debug","ts":"2026-07-24T15:15:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"88097313-19a9-43c0-a6d1-85a6b9a9335a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-8ea489.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-11VpuYoNepWlyX3aD_1JYt2b3ip8cbrhMOqD3ZtD17kC3l0aRnaw7y41ztNO6\"}"} {"level":"debug","ts":"2026-07-24T15:15:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"88097313-19a9-43c0-a6d1-85a6b9a9335a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-8ea489.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"541c8efd-6377-4752-ace7-d168370af8d3","keyName":"e2e-sub-iso-d2c33b","subscription":"e2e-shared-sub-a718fc","tenant":"e2e-shared-b-8ea489","userId":"541c8efd-6377-4752-ace7-d168370af8d3","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T15:15:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"88097313-19a9-43c0-a6d1-85a6b9a9335a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T15:15:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"88097313-19a9-43c0-a6d1-85a6b9a9335a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T15:15:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"88097313-19a9-43c0-a6d1-85a6b9a9335a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T15:15:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"88097313-19a9-43c0-a6d1-85a6b9a9335a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-8ea489/sub-test-model-8ea489\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-8ea489/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T15:15:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"88097313-19a9-43c0-a6d1-85a6b9a9335a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-a718fc"} {"level":"debug","ts":"2026-07-24T15:15:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"88097313-19a9-43c0-a6d1-85a6b9a9335a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T15:15:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"88097313-19a9-43c0-a6d1-85a6b9a9335a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T15:15:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"88097313-19a9-43c0-a6d1-85a6b9a9335a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-24T15:15:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"88097313-19a9-43c0-a6d1-85a6b9a9335a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T15:15:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"88097313-19a9-43c0-a6d1-85a6b9a9335a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T15:15:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/338996124ecc563b9759ccd16edb5488364726a79c5b018344725e0f7913a332"} {"level":"info","ts":"2026-07-24T15:15:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/92cd0ac2134c10a05f3753aa20b6f9036c14bf3ae46456af80833dc47d1241ab"} {"level":"info","ts":"2026-07-24T15:15:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/65bdd67e044e7dcff689f7d66d743e67ce890c40664cf9ad5a7149b75c30d0b1"} {"level":"info","ts":"2026-07-24T15:15:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/09bae11e466c1b7fd4a4390697823bdeb809c77799dcbe3c253ff8186111edd5"} {"level":"info","ts":"2026-07-24T15:15:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9d2cf915d69ba96154d564a51e1489c9c13960b1582e0fd61a308b885e0b1e0c"} {"level":"info","ts":"2026-07-24T15:15:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6771e3f926351e7e7eea11533db2ea5dd4b06837db63431c8ca754ee0b6658f9"} {"level":"info","ts":"2026-07-24T15:15:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6369c93f61493a2d227cf6c9cd3a16361d53c4064707fa3bbd75ada145c423ad"} {"level":"info","ts":"2026-07-24T15:15:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bc9e49fff8b6b6ecba0aba7589c20d9f87edef7b0270ea29db56960b51047402"} {"level":"info","ts":"2026-07-24T15:15:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a475b67fc0171176cf1b95af1b4eedf3fdee92674df8efc4e08205be8a14044a"} {"level":"info","ts":"2026-07-24T15:15:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3dd525089122835153f5b7ca343aac027dfa6ac8c395da9d034337d7c6737560"} {"level":"info","ts":"2026-07-24T15:15:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5518b15a6b93af4667598497423f23a7abdc8dacc8dadf4e7709bd12013c9a1d"} {"level":"info","ts":"2026-07-24T15:15:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0f4e46b7010e59973e29b9b49926b38759af3f9a6d1c15b48436e610e93a4774"} {"level":"info","ts":"2026-07-24T15:15:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fbe8444679bf28e22b7e878ad2c17b367da6b190180752e11dd69354da7a764f"} {"level":"info","ts":"2026-07-24T15:15:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8578b89f40de6e3cfc0f84f19758be8ff4d5ebeee2786225d13dc2249a4023ab"} {"level":"info","ts":"2026-07-24T15:15:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/55a5d4ab21bb36f7f40978ce640f1e48428a71b01d8a07eff1fd4260ceb86991"} {"level":"info","ts":"2026-07-24T15:15:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5f957e3bd3c3b0b1dfb1fdd278d3ce047505cb12892ac673aa208a8c7d116cf8"} {"level":"info","ts":"2026-07-24T15:15:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3c418244c8795aafcaa38df340a22943da5e6dc77f4f8c2d142afad2a76c0fc8"} {"level":"info","ts":"2026-07-24T15:15:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7b1ef7cbc9f4bd6212c3657be9cf2e8359d760550e0722cee4ced1d55b2cb2d4"} {"level":"info","ts":"2026-07-24T15:15:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b6ba89700f005fe4ef793cc551711054accbe4b1aab0e9d7ef2fe973b8424e5a"} {"level":"info","ts":"2026-07-24T15:15:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/18a966da0354e42c2a13fed24e9e8a67e8e4aa4be5e7182a4c848c532ec8e3a2"} {"level":"info","ts":"2026-07-24T15:15:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bdb82cacc703f44df58f9060d66550d824974b771d1885259ec0288f90e332a5"} {"level":"info","ts":"2026-07-24T15:15:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b63e986f099db6dded059b613fdc61522ac42647ee6624458f88a0fe4a80b4c6"} {"level":"info","ts":"2026-07-24T15:15:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/687b1b4673238fc566dcefc20e45a72a194dd689359a603228fe79ecd6fdfc19"} {"level":"info","ts":"2026-07-24T15:15:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cac0d1ed8c9ebc34639a723d1de883cd26d05c7a3fb8fe0f74efda5642dff75a"} {"level":"debug","ts":"2026-07-24T15:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd30900c228ae8cacb1f6f23d26ed55b386246809e20bac7318284c41629a1e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:16:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:16:38Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd30900c228ae8cacb1f6f23d26ed55b386246809e20bac7318284c41629a1e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd30900c228ae8cacb1f6f23d26ed55b386246809e20bac7318284c41629a1e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:16:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:16:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd30900c228ae8cacb1f6f23d26ed55b386246809e20bac7318284c41629a1e4"} {"level":"info","ts":"2026-07-24T15:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd30900c228ae8cacb1f6f23d26ed55b386246809e20bac7318284c41629a1e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd30900c228ae8cacb1f6f23d26ed55b386246809e20bac7318284c41629a1e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:16:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:16:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd30900c228ae8cacb1f6f23d26ed55b386246809e20bac7318284c41629a1e4"} {"level":"error","ts":"2026-07-24T15:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"dd30900c228ae8cacb1f6f23d26ed55b386246809e20bac7318284c41629a1e4","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"dd30900c228ae8cacb1f6f23d26ed55b386246809e20bac7318284c41629a1e4\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T15:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd30900c228ae8cacb1f6f23d26ed55b386246809e20bac7318284c41629a1e4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T15:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd30900c228ae8cacb1f6f23d26ed55b386246809e20bac7318284c41629a1e4"} {"level":"debug","ts":"2026-07-24T15:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd30900c228ae8cacb1f6f23d26ed55b386246809e20bac7318284c41629a1e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:16:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:16:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd30900c228ae8cacb1f6f23d26ed55b386246809e20bac7318284c41629a1e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd30900c228ae8cacb1f6f23d26ed55b386246809e20bac7318284c41629a1e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd30900c228ae8cacb1f6f23d26ed55b386246809e20bac7318284c41629a1e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:16:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:16:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd30900c228ae8cacb1f6f23d26ed55b386246809e20bac7318284c41629a1e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd30900c228ae8cacb1f6f23d26ed55b386246809e20bac7318284c41629a1e4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T15:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd30900c228ae8cacb1f6f23d26ed55b386246809e20bac7318284c41629a1e4"} {"level":"debug","ts":"2026-07-24T15:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd30900c228ae8cacb1f6f23d26ed55b386246809e20bac7318284c41629a1e4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T15:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd30900c228ae8cacb1f6f23d26ed55b386246809e20bac7318284c41629a1e4"} {"level":"debug","ts":"2026-07-24T15:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd30900c228ae8cacb1f6f23d26ed55b386246809e20bac7318284c41629a1e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:16:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:16:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd30900c228ae8cacb1f6f23d26ed55b386246809e20bac7318284c41629a1e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd30900c228ae8cacb1f6f23d26ed55b386246809e20bac7318284c41629a1e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd30900c228ae8cacb1f6f23d26ed55b386246809e20bac7318284c41629a1e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:16:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:16:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd30900c228ae8cacb1f6f23d26ed55b386246809e20bac7318284c41629a1e4"} {"level":"info","ts":"2026-07-24T15:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd30900c228ae8cacb1f6f23d26ed55b386246809e20bac7318284c41629a1e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd30900c228ae8cacb1f6f23d26ed55b386246809e20bac7318284c41629a1e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:16:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:16:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd30900c228ae8cacb1f6f23d26ed55b386246809e20bac7318284c41629a1e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd30900c228ae8cacb1f6f23d26ed55b386246809e20bac7318284c41629a1e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce47e51606e762b3b35d49a242f02e04ddffc214b58fa99198ebb8e389bef333","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:16:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:16:38Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd30900c228ae8cacb1f6f23d26ed55b386246809e20bac7318284c41629a1e4"} {"level":"info","ts":"2026-07-24T15:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce47e51606e762b3b35d49a242f02e04ddffc214b58fa99198ebb8e389bef333","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd30900c228ae8cacb1f6f23d26ed55b386246809e20bac7318284c41629a1e4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T15:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce47e51606e762b3b35d49a242f02e04ddffc214b58fa99198ebb8e389bef333"} {"level":"debug","ts":"2026-07-24T15:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce47e51606e762b3b35d49a242f02e04ddffc214b58fa99198ebb8e389bef333","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:16:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:16:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ce47e51606e762b3b35d49a242f02e04ddffc214b58fa99198ebb8e389bef333"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce47e51606e762b3b35d49a242f02e04ddffc214b58fa99198ebb8e389bef333","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce47e51606e762b3b35d49a242f02e04ddffc214b58fa99198ebb8e389bef333","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T15:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd30900c228ae8cacb1f6f23d26ed55b386246809e20bac7318284c41629a1e4"} {"level":"info","ts":"2026-07-24T15:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce47e51606e762b3b35d49a242f02e04ddffc214b58fa99198ebb8e389bef333"} {"level":"debug","ts":"2026-07-24T15:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b84477ba225535edbb20da780dab1124e1c77a296744f788aa6e15718c33c69a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:16:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:16:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b84477ba225535edbb20da780dab1124e1c77a296744f788aa6e15718c33c69a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b84477ba225535edbb20da780dab1124e1c77a296744f788aa6e15718c33c69a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b84477ba225535edbb20da780dab1124e1c77a296744f788aa6e15718c33c69a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T15:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b84477ba225535edbb20da780dab1124e1c77a296744f788aa6e15718c33c69a"} {"level":"debug","ts":"2026-07-24T15:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b84477ba225535edbb20da780dab1124e1c77a296744f788aa6e15718c33c69a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T15:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b84477ba225535edbb20da780dab1124e1c77a296744f788aa6e15718c33c69a"} {"level":"debug","ts":"2026-07-24T15:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b84477ba225535edbb20da780dab1124e1c77a296744f788aa6e15718c33c69a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:16:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:16:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b84477ba225535edbb20da780dab1124e1c77a296744f788aa6e15718c33c69a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b84477ba225535edbb20da780dab1124e1c77a296744f788aa6e15718c33c69a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f0d3a863e4aaa3d0454c2b21d826eb257406b1e3c109355f7ec237145bacefd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:16:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:16:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f0d3a863e4aaa3d0454c2b21d826eb257406b1e3c109355f7ec237145bacefd"} {"level":"info","ts":"2026-07-24T15:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b84477ba225535edbb20da780dab1124e1c77a296744f788aa6e15718c33c69a"} {"level":"info","ts":"2026-07-24T15:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f0d3a863e4aaa3d0454c2b21d826eb257406b1e3c109355f7ec237145bacefd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b84477ba225535edbb20da780dab1124e1c77a296744f788aa6e15718c33c69a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f0d3a863e4aaa3d0454c2b21d826eb257406b1e3c109355f7ec237145bacefd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f0d3a863e4aaa3d0454c2b21d826eb257406b1e3c109355f7ec237145bacefd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T15:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f0d3a863e4aaa3d0454c2b21d826eb257406b1e3c109355f7ec237145bacefd"} {"level":"debug","ts":"2026-07-24T15:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f0d3a863e4aaa3d0454c2b21d826eb257406b1e3c109355f7ec237145bacefd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:16:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:16:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8f0d3a863e4aaa3d0454c2b21d826eb257406b1e3c109355f7ec237145bacefd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f0d3a863e4aaa3d0454c2b21d826eb257406b1e3c109355f7ec237145bacefd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f0d3a863e4aaa3d0454c2b21d826eb257406b1e3c109355f7ec237145bacefd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6771e3f926351e7e7eea11533db2ea5dd4b06837db63431c8ca754ee0b6658f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:16:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:16:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f0d3a863e4aaa3d0454c2b21d826eb257406b1e3c109355f7ec237145bacefd"} {"level":"info","ts":"2026-07-24T15:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6771e3f926351e7e7eea11533db2ea5dd4b06837db63431c8ca754ee0b6658f9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6771e3f926351e7e7eea11533db2ea5dd4b06837db63431c8ca754ee0b6658f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:16:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:16:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6771e3f926351e7e7eea11533db2ea5dd4b06837db63431c8ca754ee0b6658f9"} {"level":"info","ts":"2026-07-24T15:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6771e3f926351e7e7eea11533db2ea5dd4b06837db63431c8ca754ee0b6658f9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6771e3f926351e7e7eea11533db2ea5dd4b06837db63431c8ca754ee0b6658f9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6771e3f926351e7e7eea11533db2ea5dd4b06837db63431c8ca754ee0b6658f9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T15:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6771e3f926351e7e7eea11533db2ea5dd4b06837db63431c8ca754ee0b6658f9"} {"level":"debug","ts":"2026-07-24T15:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89fb2f2d7d344454a4a5df84861dcf6c08d0309e6c7638a335fe5444338e354e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:16:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:16:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6771e3f926351e7e7eea11533db2ea5dd4b06837db63431c8ca754ee0b6658f9"} {"level":"info","ts":"2026-07-24T15:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89fb2f2d7d344454a4a5df84861dcf6c08d0309e6c7638a335fe5444338e354e"} {"level":"info","ts":"2026-07-24T15:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89fb2f2d7d344454a4a5df84861dcf6c08d0309e6c7638a335fe5444338e354e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6771e3f926351e7e7eea11533db2ea5dd4b06837db63431c8ca754ee0b6658f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:16:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:16:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6771e3f926351e7e7eea11533db2ea5dd4b06837db63431c8ca754ee0b6658f9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89fb2f2d7d344454a4a5df84861dcf6c08d0309e6c7638a335fe5444338e354e"} {"level":"info","ts":"2026-07-24T15:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6771e3f926351e7e7eea11533db2ea5dd4b06837db63431c8ca754ee0b6658f9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89fb2f2d7d344454a4a5df84861dcf6c08d0309e6c7638a335fe5444338e354e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:16:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:16:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["89fb2f2d7d344454a4a5df84861dcf6c08d0309e6c7638a335fe5444338e354e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89fb2f2d7d344454a4a5df84861dcf6c08d0309e6c7638a335fe5444338e354e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6771e3f926351e7e7eea11533db2ea5dd4b06837db63431c8ca754ee0b6658f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:16:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:16:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6771e3f926351e7e7eea11533db2ea5dd4b06837db63431c8ca754ee0b6658f9"} {"level":"info","ts":"2026-07-24T15:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6771e3f926351e7e7eea11533db2ea5dd4b06837db63431c8ca754ee0b6658f9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89fb2f2d7d344454a4a5df84861dcf6c08d0309e6c7638a335fe5444338e354e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:16:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:16:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89fb2f2d7d344454a4a5df84861dcf6c08d0309e6c7638a335fe5444338e354e"} {"level":"info","ts":"2026-07-24T15:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89fb2f2d7d344454a4a5df84861dcf6c08d0309e6c7638a335fe5444338e354e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6771e3f926351e7e7eea11533db2ea5dd4b06837db63431c8ca754ee0b6658f9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89fb2f2d7d344454a4a5df84861dcf6c08d0309e6c7638a335fe5444338e354e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:16:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:16:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["89fb2f2d7d344454a4a5df84861dcf6c08d0309e6c7638a335fe5444338e354e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89fb2f2d7d344454a4a5df84861dcf6c08d0309e6c7638a335fe5444338e354e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6771e3f926351e7e7eea11533db2ea5dd4b06837db63431c8ca754ee0b6658f9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89fb2f2d7d344454a4a5df84861dcf6c08d0309e6c7638a335fe5444338e354e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T15:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6771e3f926351e7e7eea11533db2ea5dd4b06837db63431c8ca754ee0b6658f9"} {"level":"debug","ts":"2026-07-24T15:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6771e3f926351e7e7eea11533db2ea5dd4b06837db63431c8ca754ee0b6658f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:16:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:16:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6771e3f926351e7e7eea11533db2ea5dd4b06837db63431c8ca754ee0b6658f9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89fb2f2d7d344454a4a5df84861dcf6c08d0309e6c7638a335fe5444338e354e"} {"level":"info","ts":"2026-07-24T15:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6771e3f926351e7e7eea11533db2ea5dd4b06837db63431c8ca754ee0b6658f9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6771e3f926351e7e7eea11533db2ea5dd4b06837db63431c8ca754ee0b6658f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:16:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:16:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6771e3f926351e7e7eea11533db2ea5dd4b06837db63431c8ca754ee0b6658f9"} {"level":"info","ts":"2026-07-24T15:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6771e3f926351e7e7eea11533db2ea5dd4b06837db63431c8ca754ee0b6658f9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6771e3f926351e7e7eea11533db2ea5dd4b06837db63431c8ca754ee0b6658f9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6771e3f926351e7e7eea11533db2ea5dd4b06837db63431c8ca754ee0b6658f9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T15:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6771e3f926351e7e7eea11533db2ea5dd4b06837db63431c8ca754ee0b6658f9"} {"level":"debug","ts":"2026-07-24T15:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6771e3f926351e7e7eea11533db2ea5dd4b06837db63431c8ca754ee0b6658f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:16:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:16:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6771e3f926351e7e7eea11533db2ea5dd4b06837db63431c8ca754ee0b6658f9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6771e3f926351e7e7eea11533db2ea5dd4b06837db63431c8ca754ee0b6658f9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b63e986f099db6dded059b613fdc61522ac42647ee6624458f88a0fe4a80b4c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:16:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:16:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b63e986f099db6dded059b613fdc61522ac42647ee6624458f88a0fe4a80b4c6"} {"level":"info","ts":"2026-07-24T15:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b63e986f099db6dded059b613fdc61522ac42647ee6624458f88a0fe4a80b4c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6771e3f926351e7e7eea11533db2ea5dd4b06837db63431c8ca754ee0b6658f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:16:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:16:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6771e3f926351e7e7eea11533db2ea5dd4b06837db63431c8ca754ee0b6658f9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b63e986f099db6dded059b613fdc61522ac42647ee6624458f88a0fe4a80b4c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:16:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:16:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b63e986f099db6dded059b613fdc61522ac42647ee6624458f88a0fe4a80b4c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6771e3f926351e7e7eea11533db2ea5dd4b06837db63431c8ca754ee0b6658f9"} {"level":"info","ts":"2026-07-24T15:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b63e986f099db6dded059b613fdc61522ac42647ee6624458f88a0fe4a80b4c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6771e3f926351e7e7eea11533db2ea5dd4b06837db63431c8ca754ee0b6658f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:16:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:16:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6771e3f926351e7e7eea11533db2ea5dd4b06837db63431c8ca754ee0b6658f9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b63e986f099db6dded059b613fdc61522ac42647ee6624458f88a0fe4a80b4c6"} {"level":"info","ts":"2026-07-24T15:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6771e3f926351e7e7eea11533db2ea5dd4b06837db63431c8ca754ee0b6658f9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b63e986f099db6dded059b613fdc61522ac42647ee6624458f88a0fe4a80b4c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6771e3f926351e7e7eea11533db2ea5dd4b06837db63431c8ca754ee0b6658f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:16:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:16:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6771e3f926351e7e7eea11533db2ea5dd4b06837db63431c8ca754ee0b6658f9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6771e3f926351e7e7eea11533db2ea5dd4b06837db63431c8ca754ee0b6658f9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T15:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6771e3f926351e7e7eea11533db2ea5dd4b06837db63431c8ca754ee0b6658f9"} {"level":"debug","ts":"2026-07-24T15:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6771e3f926351e7e7eea11533db2ea5dd4b06837db63431c8ca754ee0b6658f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:16:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:16:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6771e3f926351e7e7eea11533db2ea5dd4b06837db63431c8ca754ee0b6658f9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6771e3f926351e7e7eea11533db2ea5dd4b06837db63431c8ca754ee0b6658f9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b1d53f5f7f12a77f719eed612394f0730e7fbef9e68a156b44f8b61459f8be5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:16:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:16:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b63e986f099db6dded059b613fdc61522ac42647ee6624458f88a0fe4a80b4c6"} {"level":"info","ts":"2026-07-24T15:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b1d53f5f7f12a77f719eed612394f0730e7fbef9e68a156b44f8b61459f8be5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6771e3f926351e7e7eea11533db2ea5dd4b06837db63431c8ca754ee0b6658f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:16:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:16:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6771e3f926351e7e7eea11533db2ea5dd4b06837db63431c8ca754ee0b6658f9"} {"level":"info","ts":"2026-07-24T15:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6771e3f926351e7e7eea11533db2ea5dd4b06837db63431c8ca754ee0b6658f9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b1d53f5f7f12a77f719eed612394f0730e7fbef9e68a156b44f8b61459f8be5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:16:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:16:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b1d53f5f7f12a77f719eed612394f0730e7fbef9e68a156b44f8b61459f8be5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6771e3f926351e7e7eea11533db2ea5dd4b06837db63431c8ca754ee0b6658f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:16:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:16:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6771e3f926351e7e7eea11533db2ea5dd4b06837db63431c8ca754ee0b6658f9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b1d53f5f7f12a77f719eed612394f0730e7fbef9e68a156b44f8b61459f8be5"} {"level":"info","ts":"2026-07-24T15:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6771e3f926351e7e7eea11533db2ea5dd4b06837db63431c8ca754ee0b6658f9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b1d53f5f7f12a77f719eed612394f0730e7fbef9e68a156b44f8b61459f8be5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:16:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:16:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9b1d53f5f7f12a77f719eed612394f0730e7fbef9e68a156b44f8b61459f8be5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6771e3f926351e7e7eea11533db2ea5dd4b06837db63431c8ca754ee0b6658f9"} {"level":"info","ts":"2026-07-24T15:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b1d53f5f7f12a77f719eed612394f0730e7fbef9e68a156b44f8b61459f8be5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6771e3f926351e7e7eea11533db2ea5dd4b06837db63431c8ca754ee0b6658f9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b1d53f5f7f12a77f719eed612394f0730e7fbef9e68a156b44f8b61459f8be5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:16:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:16:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b1d53f5f7f12a77f719eed612394f0730e7fbef9e68a156b44f8b61459f8be5"} {"level":"info","ts":"2026-07-24T15:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b1d53f5f7f12a77f719eed612394f0730e7fbef9e68a156b44f8b61459f8be5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e0229b8129d3c1f10d17e0301e31d9d1f1c3d637f2ea292b6a5a9570bddf6082","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:16:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:16:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e0229b8129d3c1f10d17e0301e31d9d1f1c3d637f2ea292b6a5a9570bddf6082","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b1d53f5f7f12a77f719eed612394f0730e7fbef9e68a156b44f8b61459f8be5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:16:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:16:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9b1d53f5f7f12a77f719eed612394f0730e7fbef9e68a156b44f8b61459f8be5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6771e3f926351e7e7eea11533db2ea5dd4b06837db63431c8ca754ee0b6658f9"} {"level":"info","ts":"2026-07-24T15:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b1d53f5f7f12a77f719eed612394f0730e7fbef9e68a156b44f8b61459f8be5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e0229b8129d3c1f10d17e0301e31d9d1f1c3d637f2ea292b6a5a9570bddf6082","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:16:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:16:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e0229b8129d3c1f10d17e0301e31d9d1f1c3d637f2ea292b6a5a9570bddf6082"} {"level":"info","ts":"2026-07-24T15:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e0229b8129d3c1f10d17e0301e31d9d1f1c3d637f2ea292b6a5a9570bddf6082","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b1d53f5f7f12a77f719eed612394f0730e7fbef9e68a156b44f8b61459f8be5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:16:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:16:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b1d53f5f7f12a77f719eed612394f0730e7fbef9e68a156b44f8b61459f8be5"} {"level":"info","ts":"2026-07-24T15:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b1d53f5f7f12a77f719eed612394f0730e7fbef9e68a156b44f8b61459f8be5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e0229b8129d3c1f10d17e0301e31d9d1f1c3d637f2ea292b6a5a9570bddf6082","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b1d53f5f7f12a77f719eed612394f0730e7fbef9e68a156b44f8b61459f8be5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:16:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:16:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9b1d53f5f7f12a77f719eed612394f0730e7fbef9e68a156b44f8b61459f8be5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e0229b8129d3c1f10d17e0301e31d9d1f1c3d637f2ea292b6a5a9570bddf6082"} {"level":"info","ts":"2026-07-24T15:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b1d53f5f7f12a77f719eed612394f0730e7fbef9e68a156b44f8b61459f8be5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e0229b8129d3c1f10d17e0301e31d9d1f1c3d637f2ea292b6a5a9570bddf6082","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:16:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:16:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e0229b8129d3c1f10d17e0301e31d9d1f1c3d637f2ea292b6a5a9570bddf6082"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b1d53f5f7f12a77f719eed612394f0730e7fbef9e68a156b44f8b61459f8be5"} {"level":"info","ts":"2026-07-24T15:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e0229b8129d3c1f10d17e0301e31d9d1f1c3d637f2ea292b6a5a9570bddf6082","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b1d53f5f7f12a77f719eed612394f0730e7fbef9e68a156b44f8b61459f8be5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:16:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:16:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b1d53f5f7f12a77f719eed612394f0730e7fbef9e68a156b44f8b61459f8be5"} {"level":"info","ts":"2026-07-24T15:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e0229b8129d3c1f10d17e0301e31d9d1f1c3d637f2ea292b6a5a9570bddf6082"} {"level":"info","ts":"2026-07-24T15:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b1d53f5f7f12a77f719eed612394f0730e7fbef9e68a156b44f8b61459f8be5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e0229b8129d3c1f10d17e0301e31d9d1f1c3d637f2ea292b6a5a9570bddf6082","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b1d53f5f7f12a77f719eed612394f0730e7fbef9e68a156b44f8b61459f8be5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b1d53f5f7f12a77f719eed612394f0730e7fbef9e68a156b44f8b61459f8be5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T15:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b1d53f5f7f12a77f719eed612394f0730e7fbef9e68a156b44f8b61459f8be5"} {"level":"debug","ts":"2026-07-24T15:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b1d53f5f7f12a77f719eed612394f0730e7fbef9e68a156b44f8b61459f8be5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:16:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:16:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9b1d53f5f7f12a77f719eed612394f0730e7fbef9e68a156b44f8b61459f8be5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b1d53f5f7f12a77f719eed612394f0730e7fbef9e68a156b44f8b61459f8be5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c418244c8795aafcaa38df340a22943da5e6dc77f4f8c2d142afad2a76c0fc8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:16:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:16:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c418244c8795aafcaa38df340a22943da5e6dc77f4f8c2d142afad2a76c0fc8"} {"level":"info","ts":"2026-07-24T15:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b1d53f5f7f12a77f719eed612394f0730e7fbef9e68a156b44f8b61459f8be5"} {"level":"info","ts":"2026-07-24T15:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c418244c8795aafcaa38df340a22943da5e6dc77f4f8c2d142afad2a76c0fc8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b1d53f5f7f12a77f719eed612394f0730e7fbef9e68a156b44f8b61459f8be5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c418244c8795aafcaa38df340a22943da5e6dc77f4f8c2d142afad2a76c0fc8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:16:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:16:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c418244c8795aafcaa38df340a22943da5e6dc77f4f8c2d142afad2a76c0fc8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c418244c8795aafcaa38df340a22943da5e6dc77f4f8c2d142afad2a76c0fc8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c418244c8795aafcaa38df340a22943da5e6dc77f4f8c2d142afad2a76c0fc8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:16:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:16:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c418244c8795aafcaa38df340a22943da5e6dc77f4f8c2d142afad2a76c0fc8"} {"level":"info","ts":"2026-07-24T15:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c418244c8795aafcaa38df340a22943da5e6dc77f4f8c2d142afad2a76c0fc8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a475b67fc0171176cf1b95af1b4eedf3fdee92674df8efc4e08205be8a14044a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:16:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:16:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c418244c8795aafcaa38df340a22943da5e6dc77f4f8c2d142afad2a76c0fc8"} {"level":"info","ts":"2026-07-24T15:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a475b67fc0171176cf1b95af1b4eedf3fdee92674df8efc4e08205be8a14044a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c418244c8795aafcaa38df340a22943da5e6dc77f4f8c2d142afad2a76c0fc8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:16:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:16:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c418244c8795aafcaa38df340a22943da5e6dc77f4f8c2d142afad2a76c0fc8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a475b67fc0171176cf1b95af1b4eedf3fdee92674df8efc4e08205be8a14044a"} {"level":"info","ts":"2026-07-24T15:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c418244c8795aafcaa38df340a22943da5e6dc77f4f8c2d142afad2a76c0fc8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55a5d4ab21bb36f7f40978ce640f1e48428a71b01d8a07eff1fd4260ceb86991","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:16:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:16:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c418244c8795aafcaa38df340a22943da5e6dc77f4f8c2d142afad2a76c0fc8"} {"level":"info","ts":"2026-07-24T15:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55a5d4ab21bb36f7f40978ce640f1e48428a71b01d8a07eff1fd4260ceb86991","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a475b67fc0171176cf1b95af1b4eedf3fdee92674df8efc4e08205be8a14044a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:16:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:16:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a475b67fc0171176cf1b95af1b4eedf3fdee92674df8efc4e08205be8a14044a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55a5d4ab21bb36f7f40978ce640f1e48428a71b01d8a07eff1fd4260ceb86991"} {"level":"info","ts":"2026-07-24T15:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a475b67fc0171176cf1b95af1b4eedf3fdee92674df8efc4e08205be8a14044a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c418244c8795aafcaa38df340a22943da5e6dc77f4f8c2d142afad2a76c0fc8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55a5d4ab21bb36f7f40978ce640f1e48428a71b01d8a07eff1fd4260ceb86991","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:16:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:16:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["55a5d4ab21bb36f7f40978ce640f1e48428a71b01d8a07eff1fd4260ceb86991"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a475b67fc0171176cf1b95af1b4eedf3fdee92674df8efc4e08205be8a14044a"} {"level":"info","ts":"2026-07-24T15:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55a5d4ab21bb36f7f40978ce640f1e48428a71b01d8a07eff1fd4260ceb86991","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a475b67fc0171176cf1b95af1b4eedf3fdee92674df8efc4e08205be8a14044a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09bae11e466c1b7fd4a4390697823bdeb809c77799dcbe3c253ff8186111edd5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:16:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:16:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c418244c8795aafcaa38df340a22943da5e6dc77f4f8c2d142afad2a76c0fc8"} {"level":"info","ts":"2026-07-24T15:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09bae11e466c1b7fd4a4390697823bdeb809c77799dcbe3c253ff8186111edd5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55a5d4ab21bb36f7f40978ce640f1e48428a71b01d8a07eff1fd4260ceb86991","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:16:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:16:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55a5d4ab21bb36f7f40978ce640f1e48428a71b01d8a07eff1fd4260ceb86991","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6afbb0129bf35ade2dff4570abfcc0353e3fe180f9f0c71ad102c06b223653d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:16:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:16:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55a5d4ab21bb36f7f40978ce640f1e48428a71b01d8a07eff1fd4260ceb86991"} {"level":"info","ts":"2026-07-24T15:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6afbb0129bf35ade2dff4570abfcc0353e3fe180f9f0c71ad102c06b223653d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09bae11e466c1b7fd4a4390697823bdeb809c77799dcbe3c253ff8186111edd5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb1c239a489ad83157cab777f895c96c594822cdbb7003bc1fdb5a2f9d4ab1c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:16:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:16:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a475b67fc0171176cf1b95af1b4eedf3fdee92674df8efc4e08205be8a14044a"} {"level":"info","ts":"2026-07-24T15:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb1c239a489ad83157cab777f895c96c594822cdbb7003bc1fdb5a2f9d4ab1c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55a5d4ab21bb36f7f40978ce640f1e48428a71b01d8a07eff1fd4260ceb86991","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:16:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:16:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["55a5d4ab21bb36f7f40978ce640f1e48428a71b01d8a07eff1fd4260ceb86991"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09bae11e466c1b7fd4a4390697823bdeb809c77799dcbe3c253ff8186111edd5"} {"level":"info","ts":"2026-07-24T15:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55a5d4ab21bb36f7f40978ce640f1e48428a71b01d8a07eff1fd4260ceb86991","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6afbb0129bf35ade2dff4570abfcc0353e3fe180f9f0c71ad102c06b223653d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:16:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:16:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6afbb0129bf35ade2dff4570abfcc0353e3fe180f9f0c71ad102c06b223653d"} {"level":"info","ts":"2026-07-24T15:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6afbb0129bf35ade2dff4570abfcc0353e3fe180f9f0c71ad102c06b223653d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09bae11e466c1b7fd4a4390697823bdeb809c77799dcbe3c253ff8186111edd5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:16:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:16:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["09bae11e466c1b7fd4a4390697823bdeb809c77799dcbe3c253ff8186111edd5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09bae11e466c1b7fd4a4390697823bdeb809c77799dcbe3c253ff8186111edd5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb1c239a489ad83157cab777f895c96c594822cdbb7003bc1fdb5a2f9d4ab1c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:16:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:16:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb1c239a489ad83157cab777f895c96c594822cdbb7003bc1fdb5a2f9d4ab1c0"} {"level":"info","ts":"2026-07-24T15:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb1c239a489ad83157cab777f895c96c594822cdbb7003bc1fdb5a2f9d4ab1c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55a5d4ab21bb36f7f40978ce640f1e48428a71b01d8a07eff1fd4260ceb86991","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:16:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:16:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55a5d4ab21bb36f7f40978ce640f1e48428a71b01d8a07eff1fd4260ceb86991"} {"level":"info","ts":"2026-07-24T15:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55a5d4ab21bb36f7f40978ce640f1e48428a71b01d8a07eff1fd4260ceb86991","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"016c0ddecb4c0887d62fd7497af33190e4653b22059f94f127356f0738724b32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:16:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:16:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/016c0ddecb4c0887d62fd7497af33190e4653b22059f94f127356f0738724b32"} {"level":"info","ts":"2026-07-24T15:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"016c0ddecb4c0887d62fd7497af33190e4653b22059f94f127356f0738724b32","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6afbb0129bf35ade2dff4570abfcc0353e3fe180f9f0c71ad102c06b223653d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b1ef7cbc9f4bd6212c3657be9cf2e8359d760550e0722cee4ced1d55b2cb2d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:16:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:16:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6afbb0129bf35ade2dff4570abfcc0353e3fe180f9f0c71ad102c06b223653d"} {"level":"info","ts":"2026-07-24T15:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b1ef7cbc9f4bd6212c3657be9cf2e8359d760550e0722cee4ced1d55b2cb2d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09bae11e466c1b7fd4a4390697823bdeb809c77799dcbe3c253ff8186111edd5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e43a58d97b85af61310417750a457e79000576dc5901f098b80a99b396ddac3e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:16:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:16:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b1ef7cbc9f4bd6212c3657be9cf2e8359d760550e0722cee4ced1d55b2cb2d4"} {"level":"info","ts":"2026-07-24T15:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09bae11e466c1b7fd4a4390697823bdeb809c77799dcbe3c253ff8186111edd5"} {"level":"info","ts":"2026-07-24T15:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e43a58d97b85af61310417750a457e79000576dc5901f098b80a99b396ddac3e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb1c239a489ad83157cab777f895c96c594822cdbb7003bc1fdb5a2f9d4ab1c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:16:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:16:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fb1c239a489ad83157cab777f895c96c594822cdbb7003bc1fdb5a2f9d4ab1c0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e43a58d97b85af61310417750a457e79000576dc5901f098b80a99b396ddac3e"} {"level":"info","ts":"2026-07-24T15:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb1c239a489ad83157cab777f895c96c594822cdbb7003bc1fdb5a2f9d4ab1c0"} {"level":"info","ts":"2026-07-24T15:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55a5d4ab21bb36f7f40978ce640f1e48428a71b01d8a07eff1fd4260ceb86991"} {"level":"info","ts":"2026-07-24T15:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/759b45c05cdd6b3edf3f3c5ea6df90383879f1ba2513a2429afd462c751a1355"} {"level":"info","ts":"2026-07-24T15:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb1c239a489ad83157cab777f895c96c594822cdbb7003bc1fdb5a2f9d4ab1c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55a5d4ab21bb36f7f40978ce640f1e48428a71b01d8a07eff1fd4260ceb86991","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:16:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:16:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["55a5d4ab21bb36f7f40978ce640f1e48428a71b01d8a07eff1fd4260ceb86991"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/016c0ddecb4c0887d62fd7497af33190e4653b22059f94f127356f0738724b32"} {"level":"info","ts":"2026-07-24T15:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55a5d4ab21bb36f7f40978ce640f1e48428a71b01d8a07eff1fd4260ceb86991","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"759b45c05cdd6b3edf3f3c5ea6df90383879f1ba2513a2429afd462c751a1355","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:16:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:16:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["759b45c05cdd6b3edf3f3c5ea6df90383879f1ba2513a2429afd462c751a1355"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83c8196c690585df78e9d0a89dac8af76b3ba3959ca1d0d967e78a6c34efdd52"} {"level":"info","ts":"2026-07-24T15:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b1ef7cbc9f4bd6212c3657be9cf2e8359d760550e0722cee4ced1d55b2cb2d4"} {"level":"info","ts":"2026-07-24T15:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"759b45c05cdd6b3edf3f3c5ea6df90383879f1ba2513a2429afd462c751a1355","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"016c0ddecb4c0887d62fd7497af33190e4653b22059f94f127356f0738724b32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:16:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:16:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["016c0ddecb4c0887d62fd7497af33190e4653b22059f94f127356f0738724b32"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e43a58d97b85af61310417750a457e79000576dc5901f098b80a99b396ddac3e"} {"level":"info","ts":"2026-07-24T15:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cac0d1ed8c9ebc34639a723d1de883cd26d05c7a3fb8fe0f74efda5642dff75a"} {"level":"info","ts":"2026-07-24T15:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"016c0ddecb4c0887d62fd7497af33190e4653b22059f94f127356f0738724b32","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6afbb0129bf35ade2dff4570abfcc0353e3fe180f9f0c71ad102c06b223653d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:16:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:16:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b6afbb0129bf35ade2dff4570abfcc0353e3fe180f9f0c71ad102c06b223653d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb1c239a489ad83157cab777f895c96c594822cdbb7003bc1fdb5a2f9d4ab1c0"} {"level":"info","ts":"2026-07-24T15:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/894852862e694c1a8cc4de376deb5063c657089f3fdc0afc53c0b9e92dceaa71"} {"level":"info","ts":"2026-07-24T15:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55a5d4ab21bb36f7f40978ce640f1e48428a71b01d8a07eff1fd4260ceb86991"} {"level":"info","ts":"2026-07-24T15:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6afbb0129bf35ade2dff4570abfcc0353e3fe180f9f0c71ad102c06b223653d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b1ef7cbc9f4bd6212c3657be9cf2e8359d760550e0722cee4ced1d55b2cb2d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:16:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:16:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7b1ef7cbc9f4bd6212c3657be9cf2e8359d760550e0722cee4ced1d55b2cb2d4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/499f7bb1c8dda74259ca646913acc34b1ef2a1884926d433d10d853def921b85"} {"level":"info","ts":"2026-07-24T15:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/759b45c05cdd6b3edf3f3c5ea6df90383879f1ba2513a2429afd462c751a1355"} {"level":"info","ts":"2026-07-24T15:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b1ef7cbc9f4bd6212c3657be9cf2e8359d760550e0722cee4ced1d55b2cb2d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83c8196c690585df78e9d0a89dac8af76b3ba3959ca1d0d967e78a6c34efdd52","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:16:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:16:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["83c8196c690585df78e9d0a89dac8af76b3ba3959ca1d0d967e78a6c34efdd52"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a54aceada7cfcc76c05c9ba322b82d92df7e27cbbf943a766117a7127d669fc6"} {"level":"info","ts":"2026-07-24T15:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/016c0ddecb4c0887d62fd7497af33190e4653b22059f94f127356f0738724b32"} {"level":"info","ts":"2026-07-24T15:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83c8196c690585df78e9d0a89dac8af76b3ba3959ca1d0d967e78a6c34efdd52","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e43a58d97b85af61310417750a457e79000576dc5901f098b80a99b396ddac3e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:16:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:16:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e43a58d97b85af61310417750a457e79000576dc5901f098b80a99b396ddac3e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6afbb0129bf35ade2dff4570abfcc0353e3fe180f9f0c71ad102c06b223653d"} {"level":"info","ts":"2026-07-24T15:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b1ef7cbc9f4bd6212c3657be9cf2e8359d760550e0722cee4ced1d55b2cb2d4"} {"level":"info","ts":"2026-07-24T15:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83c8196c690585df78e9d0a89dac8af76b3ba3959ca1d0d967e78a6c34efdd52"} {"level":"info","ts":"2026-07-24T15:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e43a58d97b85af61310417750a457e79000576dc5901f098b80a99b396ddac3e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cac0d1ed8c9ebc34639a723d1de883cd26d05c7a3fb8fe0f74efda5642dff75a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:16:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:16:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cac0d1ed8c9ebc34639a723d1de883cd26d05c7a3fb8fe0f74efda5642dff75a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e43a58d97b85af61310417750a457e79000576dc5901f098b80a99b396ddac3e"} {"level":"info","ts":"2026-07-24T15:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cac0d1ed8c9ebc34639a723d1de883cd26d05c7a3fb8fe0f74efda5642dff75a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb1c239a489ad83157cab777f895c96c594822cdbb7003bc1fdb5a2f9d4ab1c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"894852862e694c1a8cc4de376deb5063c657089f3fdc0afc53c0b9e92dceaa71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:16:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:16:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["894852862e694c1a8cc4de376deb5063c657089f3fdc0afc53c0b9e92dceaa71"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cac0d1ed8c9ebc34639a723d1de883cd26d05c7a3fb8fe0f74efda5642dff75a"} {"level":"info","ts":"2026-07-24T15:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"894852862e694c1a8cc4de376deb5063c657089f3fdc0afc53c0b9e92dceaa71","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55a5d4ab21bb36f7f40978ce640f1e48428a71b01d8a07eff1fd4260ceb86991","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"499f7bb1c8dda74259ca646913acc34b1ef2a1884926d433d10d853def921b85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:16:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:16:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["499f7bb1c8dda74259ca646913acc34b1ef2a1884926d433d10d853def921b85"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/894852862e694c1a8cc4de376deb5063c657089f3fdc0afc53c0b9e92dceaa71"} {"level":"info","ts":"2026-07-24T15:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"499f7bb1c8dda74259ca646913acc34b1ef2a1884926d433d10d853def921b85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"759b45c05cdd6b3edf3f3c5ea6df90383879f1ba2513a2429afd462c751a1355","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a54aceada7cfcc76c05c9ba322b82d92df7e27cbbf943a766117a7127d669fc6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:16:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:16:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a54aceada7cfcc76c05c9ba322b82d92df7e27cbbf943a766117a7127d669fc6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/499f7bb1c8dda74259ca646913acc34b1ef2a1884926d433d10d853def921b85"} {"level":"info","ts":"2026-07-24T15:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a54aceada7cfcc76c05c9ba322b82d92df7e27cbbf943a766117a7127d669fc6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"016c0ddecb4c0887d62fd7497af33190e4653b22059f94f127356f0738724b32","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6afbb0129bf35ade2dff4570abfcc0353e3fe180f9f0c71ad102c06b223653d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b1ef7cbc9f4bd6212c3657be9cf2e8359d760550e0722cee4ced1d55b2cb2d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83c8196c690585df78e9d0a89dac8af76b3ba3959ca1d0d967e78a6c34efdd52","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e43a58d97b85af61310417750a457e79000576dc5901f098b80a99b396ddac3e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cac0d1ed8c9ebc34639a723d1de883cd26d05c7a3fb8fe0f74efda5642dff75a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"894852862e694c1a8cc4de376deb5063c657089f3fdc0afc53c0b9e92dceaa71","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"499f7bb1c8dda74259ca646913acc34b1ef2a1884926d433d10d853def921b85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a54aceada7cfcc76c05c9ba322b82d92df7e27cbbf943a766117a7127d669fc6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:16:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:16:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a54aceada7cfcc76c05c9ba322b82d92df7e27cbbf943a766117a7127d669fc6"} {"level":"info","ts":"2026-07-24T15:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a54aceada7cfcc76c05c9ba322b82d92df7e27cbbf943a766117a7127d669fc6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a54aceada7cfcc76c05c9ba322b82d92df7e27cbbf943a766117a7127d669fc6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a54aceada7cfcc76c05c9ba322b82d92df7e27cbbf943a766117a7127d669fc6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T15:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a54aceada7cfcc76c05c9ba322b82d92df7e27cbbf943a766117a7127d669fc6"} {"level":"debug","ts":"2026-07-24T15:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a54aceada7cfcc76c05c9ba322b82d92df7e27cbbf943a766117a7127d669fc6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:16:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:16:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a54aceada7cfcc76c05c9ba322b82d92df7e27cbbf943a766117a7127d669fc6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a54aceada7cfcc76c05c9ba322b82d92df7e27cbbf943a766117a7127d669fc6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a54aceada7cfcc76c05c9ba322b82d92df7e27cbbf943a766117a7127d669fc6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T15:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a54aceada7cfcc76c05c9ba322b82d92df7e27cbbf943a766117a7127d669fc6"} {"level":"info","ts":"2026-07-24T15:16:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"165b9df7-92dd-4c34-8f0c-16577fd4b7d7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:36560","PortSpecifier":{"PortValue":36560}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"165b9df7-92dd-4c34-8f0c-16577fd4b7d7","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-dc7d81.apps.3be3295e-9019-4b6b-9df8-99ce19d48613.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T15:16:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"165b9df7-92dd-4c34-8f0c-16577fd4b7d7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:36560","PortSpecifier":{"PortValue":36560}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784906208,"nanos":624992551},"http":{"id":"165b9df7-92dd-4c34-8f0c-16577fd4b7d7","method":"POST","headers":{":authority":"e2e-shared-a-dc7d81.apps.3be3295e-9019-4b6b-9df8-99ce19d48613.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T15:16:48Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"165b9df7-92dd-4c34-8f0c-16577fd4b7d7","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T15:16:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"165b9df7-92dd-4c34-8f0c-16577fd4b7d7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e9103260-9a05-4d99-8fa1-24683f35cf9c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac7166a7-f0ef-4ddf-98c5-a70fe2accb13"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/99ce19d48613"]}} {"level":"debug","ts":"2026-07-24T15:16:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"165b9df7-92dd-4c34-8f0c-16577fd4b7d7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/99ce19d48613"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac7166a7-f0ef-4ddf-98c5-a70fe2accb13"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e9103260-9a05-4d99-8fa1-24683f35cf9c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"09bae11e466c1b7fd4a4390697823bdeb809c77799dcbe3c253ff8186111edd5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.73:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-dc7d81.apps.3be3295e-9019-4b6b-9df8-99ce19d48613.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T15:16:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"165b9df7-92dd-4c34-8f0c-16577fd4b7d7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T15:16:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"165b9df7-92dd-4c34-8f0c-16577fd4b7d7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T15:16:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"165b9df7-92dd-4c34-8f0c-16577fd4b7d7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-dc7d81/rate-test-model-dc7d81\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-dc7d81/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T15:16:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"165b9df7-92dd-4c34-8f0c-16577fd4b7d7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T15:16:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"165b9df7-92dd-4c34-8f0c-16577fd4b7d7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T15:16:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"165b9df7-92dd-4c34-8f0c-16577fd4b7d7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-24T15:16:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"165b9df7-92dd-4c34-8f0c-16577fd4b7d7","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T15:16:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"165b9df7-92dd-4c34-8f0c-16577fd4b7d7","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T15:16:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"775b332b-eb0d-4ef6-ad24-dd8aa48430e7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:38844","PortSpecifier":{"PortValue":38844}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"775b332b-eb0d-4ef6-ad24-dd8aa48430e7","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-8ea489.apps.3be3295e-9019-4b6b-9df8-99ce19d48613.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T15:16:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"775b332b-eb0d-4ef6-ad24-dd8aa48430e7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:38844","PortSpecifier":{"PortValue":38844}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784906208,"nanos":671209888},"http":{"id":"775b332b-eb0d-4ef6-ad24-dd8aa48430e7","method":"POST","headers":{":authority":"e2e-shared-b-8ea489.apps.3be3295e-9019-4b6b-9df8-99ce19d48613.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T15:16:48Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"775b332b-eb0d-4ef6-ad24-dd8aa48430e7","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T15:16:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"775b332b-eb0d-4ef6-ad24-dd8aa48430e7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e9103260-9a05-4d99-8fa1-24683f35cf9c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac7166a7-f0ef-4ddf-98c5-a70fe2accb13"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/99ce19d48613"]}} {"level":"debug","ts":"2026-07-24T15:16:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"775b332b-eb0d-4ef6-ad24-dd8aa48430e7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/99ce19d48613"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac7166a7-f0ef-4ddf-98c5-a70fe2accb13"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e9103260-9a05-4d99-8fa1-24683f35cf9c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3c418244c8795aafcaa38df340a22943da5e6dc77f4f8c2d142afad2a76c0fc8"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.76:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-8ea489.apps.3be3295e-9019-4b6b-9df8-99ce19d48613.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T15:16:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"775b332b-eb0d-4ef6-ad24-dd8aa48430e7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T15:16:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"775b332b-eb0d-4ef6-ad24-dd8aa48430e7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T15:16:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"775b332b-eb0d-4ef6-ad24-dd8aa48430e7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-8ea489/rate-test-model-8ea489\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-8ea489/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T15:16:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"775b332b-eb0d-4ef6-ad24-dd8aa48430e7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T15:16:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"775b332b-eb0d-4ef6-ad24-dd8aa48430e7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T15:16:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"775b332b-eb0d-4ef6-ad24-dd8aa48430e7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-24T15:16:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"775b332b-eb0d-4ef6-ad24-dd8aa48430e7","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T15:16:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"775b332b-eb0d-4ef6-ad24-dd8aa48430e7","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T15:16:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"91ec5fff-3d26-4386-94ff-42e36b8f721d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:36562","PortSpecifier":{"PortValue":36562}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"91ec5fff-3d26-4386-94ff-42e36b8f721d","method":"POST","path":"/ai-tenant-e2e-shared-a-dc7d81/rate-test-model-dc7d81/v1/completions","host":"e2e-shared-a-dc7d81.apps.3be3295e-9019-4b6b-9df8-99ce19d48613.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T15:16:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"91ec5fff-3d26-4386-94ff-42e36b8f721d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:36562","PortSpecifier":{"PortValue":36562}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784906208,"nanos":714331359},"http":{"id":"91ec5fff-3d26-4386-94ff-42e36b8f721d","method":"POST","headers":{":authority":"e2e-shared-a-dc7d81.apps.3be3295e-9019-4b6b-9df8-99ce19d48613.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-dc7d81/rate-test-model-dc7d81/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T15:16:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"91ec5fff-3d26-4386-94ff-42e36b8f721d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1U6IJiYeP84Xrgwqk_3OFVJkKnTwMQEQgrTkHHUjDSMbagnFFpmdCITc1iznH"} {"level":"debug","ts":"2026-07-24T15:16:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"91ec5fff-3d26-4386-94ff-42e36b8f721d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-dc7d81.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1U6IJiYeP84Xrgwqk_3OFVJkKnTwMQEQgrTkHHUjDSMbagnFFpmdCITc1iznH\"}"} {"level":"debug","ts":"2026-07-24T15:16:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"91ec5fff-3d26-4386-94ff-42e36b8f721d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-dc7d81.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"63f996f2-e5cd-48b2-95d7-52ed009cac61","keyName":"e2e-rate-a-03df77","subscription":"e2e-rate-iso-a-03df77","tenant":"e2e-shared-a-dc7d81","userId":"63f996f2-e5cd-48b2-95d7-52ed009cac61","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T15:16:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"91ec5fff-3d26-4386-94ff-42e36b8f721d","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-dc7d81.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-dc7d81/rate-test-model-dc7d81\",\"requestedSubscription\":\"e2e-rate-iso-a-03df77\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-24T15:16:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"91ec5fff-3d26-4386-94ff-42e36b8f721d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-dc7d81.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-dc7d81","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-03df77","namespace":"ai-tenant-e2e-shared-a-dc7d81","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-dc7d81/rate-test-model-dc7d81"}} {"level":"debug","ts":"2026-07-24T15:16:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"91ec5fff-3d26-4386-94ff-42e36b8f721d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T15:16:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"91ec5fff-3d26-4386-94ff-42e36b8f721d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T15:16:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"91ec5fff-3d26-4386-94ff-42e36b8f721d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T15:16:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"91ec5fff-3d26-4386-94ff-42e36b8f721d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-dc7d81/rate-test-model-dc7d81\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-dc7d81/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T15:16:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"91ec5fff-3d26-4386-94ff-42e36b8f721d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T15:16:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"91ec5fff-3d26-4386-94ff-42e36b8f721d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T15:16:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"91ec5fff-3d26-4386-94ff-42e36b8f721d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T15:16:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"91ec5fff-3d26-4386-94ff-42e36b8f721d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-03df77"} {"level":"debug","ts":"2026-07-24T15:16:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"91ec5fff-3d26-4386-94ff-42e36b8f721d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"63f996f2-e5cd-48b2-95d7-52ed009cac61","keyName":"e2e-rate-a-03df77","selected_subscription":"e2e-rate-iso-a-03df77","selected_subscription_key":"ai-tenant-e2e-shared-a-dc7d81/e2e-rate-iso-a-03df77@ai-tenant-e2e-shared-a-dc7d81/rate-test-model-dc7d81","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-dc7d81","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-03df77","namespace":"ai-tenant-e2e-shared-a-dc7d81","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-dc7d81/rate-test-model-dc7d81"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-24T15:16:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"91ec5fff-3d26-4386-94ff-42e36b8f721d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T15:16:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"91ec5fff-3d26-4386-94ff-42e36b8f721d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T15:16:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"02c5a0fe-16c6-472f-9dd4-263a0cf2462e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:36578","PortSpecifier":{"PortValue":36578}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"02c5a0fe-16c6-472f-9dd4-263a0cf2462e","method":"POST","path":"/ai-tenant-e2e-shared-a-dc7d81/rate-test-model-dc7d81/v1/completions","host":"e2e-shared-a-dc7d81.apps.3be3295e-9019-4b6b-9df8-99ce19d48613.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T15:16:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"02c5a0fe-16c6-472f-9dd4-263a0cf2462e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:36578","PortSpecifier":{"PortValue":36578}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784906209,"nanos":806440070},"http":{"id":"02c5a0fe-16c6-472f-9dd4-263a0cf2462e","method":"POST","headers":{":authority":"e2e-shared-a-dc7d81.apps.3be3295e-9019-4b6b-9df8-99ce19d48613.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-dc7d81/rate-test-model-dc7d81/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T15:16:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"02c5a0fe-16c6-472f-9dd4-263a0cf2462e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1U6IJiYeP84Xrgwqk_3OFVJkKnTwMQEQgrTkHHUjDSMbagnFFpmdCITc1iznH"} {"level":"debug","ts":"2026-07-24T15:16:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"02c5a0fe-16c6-472f-9dd4-263a0cf2462e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-dc7d81.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1U6IJiYeP84Xrgwqk_3OFVJkKnTwMQEQgrTkHHUjDSMbagnFFpmdCITc1iznH\"}"} {"level":"debug","ts":"2026-07-24T15:16:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"02c5a0fe-16c6-472f-9dd4-263a0cf2462e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-dc7d81.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"63f996f2-e5cd-48b2-95d7-52ed009cac61","keyName":"e2e-rate-a-03df77","subscription":"e2e-rate-iso-a-03df77","tenant":"e2e-shared-a-dc7d81","userId":"63f996f2-e5cd-48b2-95d7-52ed009cac61","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T15:16:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"02c5a0fe-16c6-472f-9dd4-263a0cf2462e","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-dc7d81.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-dc7d81/rate-test-model-dc7d81\",\"requestedSubscription\":\"e2e-rate-iso-a-03df77\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-24T15:16:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"02c5a0fe-16c6-472f-9dd4-263a0cf2462e","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-dc7d81.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-dc7d81","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-03df77","namespace":"ai-tenant-e2e-shared-a-dc7d81","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-dc7d81/rate-test-model-dc7d81"}} {"level":"debug","ts":"2026-07-24T15:16:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"02c5a0fe-16c6-472f-9dd4-263a0cf2462e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T15:16:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"02c5a0fe-16c6-472f-9dd4-263a0cf2462e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T15:16:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"02c5a0fe-16c6-472f-9dd4-263a0cf2462e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T15:16:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"02c5a0fe-16c6-472f-9dd4-263a0cf2462e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-dc7d81/rate-test-model-dc7d81\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-dc7d81/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T15:16:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"02c5a0fe-16c6-472f-9dd4-263a0cf2462e","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T15:16:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"02c5a0fe-16c6-472f-9dd4-263a0cf2462e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T15:16:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"02c5a0fe-16c6-472f-9dd4-263a0cf2462e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-03df77"} {"level":"debug","ts":"2026-07-24T15:16:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"02c5a0fe-16c6-472f-9dd4-263a0cf2462e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T15:16:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"02c5a0fe-16c6-472f-9dd4-263a0cf2462e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"63f996f2-e5cd-48b2-95d7-52ed009cac61","keyName":"e2e-rate-a-03df77","selected_subscription":"e2e-rate-iso-a-03df77","selected_subscription_key":"ai-tenant-e2e-shared-a-dc7d81/e2e-rate-iso-a-03df77@ai-tenant-e2e-shared-a-dc7d81/rate-test-model-dc7d81","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-dc7d81","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-03df77","namespace":"ai-tenant-e2e-shared-a-dc7d81","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-dc7d81/rate-test-model-dc7d81"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-24T15:16:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"02c5a0fe-16c6-472f-9dd4-263a0cf2462e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T15:16:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"02c5a0fe-16c6-472f-9dd4-263a0cf2462e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T15:16:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bb2b4663-73a3-4d53-a8bd-ea68add441bb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:36588","PortSpecifier":{"PortValue":36588}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bb2b4663-73a3-4d53-a8bd-ea68add441bb","method":"POST","path":"/ai-tenant-e2e-shared-a-dc7d81/rate-test-model-dc7d81/v1/completions","host":"e2e-shared-a-dc7d81.apps.3be3295e-9019-4b6b-9df8-99ce19d48613.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T15:16:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bb2b4663-73a3-4d53-a8bd-ea68add441bb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:36588","PortSpecifier":{"PortValue":36588}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784906210,"nanos":850735012},"http":{"id":"bb2b4663-73a3-4d53-a8bd-ea68add441bb","method":"POST","headers":{":authority":"e2e-shared-a-dc7d81.apps.3be3295e-9019-4b6b-9df8-99ce19d48613.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-dc7d81/rate-test-model-dc7d81/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T15:16:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bb2b4663-73a3-4d53-a8bd-ea68add441bb","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1U6IJiYeP84Xrgwqk_3OFVJkKnTwMQEQgrTkHHUjDSMbagnFFpmdCITc1iznH"} {"level":"debug","ts":"2026-07-24T15:16:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bb2b4663-73a3-4d53-a8bd-ea68add441bb","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-dc7d81.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1U6IJiYeP84Xrgwqk_3OFVJkKnTwMQEQgrTkHHUjDSMbagnFFpmdCITc1iznH\"}"} {"level":"debug","ts":"2026-07-24T15:16:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bb2b4663-73a3-4d53-a8bd-ea68add441bb","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-dc7d81.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"63f996f2-e5cd-48b2-95d7-52ed009cac61","keyName":"e2e-rate-a-03df77","subscription":"e2e-rate-iso-a-03df77","tenant":"e2e-shared-a-dc7d81","userId":"63f996f2-e5cd-48b2-95d7-52ed009cac61","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T15:16:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bb2b4663-73a3-4d53-a8bd-ea68add441bb","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-dc7d81.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-dc7d81/rate-test-model-dc7d81\",\"requestedSubscription\":\"e2e-rate-iso-a-03df77\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-24T15:16:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bb2b4663-73a3-4d53-a8bd-ea68add441bb","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-dc7d81.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-dc7d81","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-03df77","namespace":"ai-tenant-e2e-shared-a-dc7d81","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-dc7d81/rate-test-model-dc7d81"}} {"level":"debug","ts":"2026-07-24T15:16:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bb2b4663-73a3-4d53-a8bd-ea68add441bb","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T15:16:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bb2b4663-73a3-4d53-a8bd-ea68add441bb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T15:16:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bb2b4663-73a3-4d53-a8bd-ea68add441bb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T15:16:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bb2b4663-73a3-4d53-a8bd-ea68add441bb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-dc7d81/rate-test-model-dc7d81\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-dc7d81/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T15:16:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bb2b4663-73a3-4d53-a8bd-ea68add441bb","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T15:16:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bb2b4663-73a3-4d53-a8bd-ea68add441bb","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T15:16:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bb2b4663-73a3-4d53-a8bd-ea68add441bb","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T15:16:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bb2b4663-73a3-4d53-a8bd-ea68add441bb","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-03df77"} {"level":"debug","ts":"2026-07-24T15:16:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bb2b4663-73a3-4d53-a8bd-ea68add441bb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"63f996f2-e5cd-48b2-95d7-52ed009cac61","keyName":"e2e-rate-a-03df77","selected_subscription":"e2e-rate-iso-a-03df77","selected_subscription_key":"ai-tenant-e2e-shared-a-dc7d81/e2e-rate-iso-a-03df77@ai-tenant-e2e-shared-a-dc7d81/rate-test-model-dc7d81","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-dc7d81","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-03df77","namespace":"ai-tenant-e2e-shared-a-dc7d81","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-dc7d81/rate-test-model-dc7d81"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-24T15:16:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bb2b4663-73a3-4d53-a8bd-ea68add441bb","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T15:16:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bb2b4663-73a3-4d53-a8bd-ea68add441bb","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T15:17:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fb047b50-ad46-4567-9925-f4281a32adfe","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:53112","PortSpecifier":{"PortValue":53112}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fb047b50-ad46-4567-9925-f4281a32adfe","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-dc7d81.apps.3be3295e-9019-4b6b-9df8-99ce19d48613.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T15:17:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fb047b50-ad46-4567-9925-f4281a32adfe","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:53112","PortSpecifier":{"PortValue":53112}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784906230,"nanos":319089851},"http":{"id":"fb047b50-ad46-4567-9925-f4281a32adfe","method":"POST","headers":{":authority":"e2e-shared-a-dc7d81.apps.3be3295e-9019-4b6b-9df8-99ce19d48613.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T15:17:10Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fb047b50-ad46-4567-9925-f4281a32adfe","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T15:17:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fb047b50-ad46-4567-9925-f4281a32adfe","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e9103260-9a05-4d99-8fa1-24683f35cf9c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac7166a7-f0ef-4ddf-98c5-a70fe2accb13"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/99ce19d48613"]}} {"level":"debug","ts":"2026-07-24T15:17:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fb047b50-ad46-4567-9925-f4281a32adfe","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/99ce19d48613"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac7166a7-f0ef-4ddf-98c5-a70fe2accb13"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e9103260-9a05-4d99-8fa1-24683f35cf9c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"09bae11e466c1b7fd4a4390697823bdeb809c77799dcbe3c253ff8186111edd5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.73:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-dc7d81.apps.3be3295e-9019-4b6b-9df8-99ce19d48613.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T15:17:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fb047b50-ad46-4567-9925-f4281a32adfe","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T15:17:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fb047b50-ad46-4567-9925-f4281a32adfe","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T15:17:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fb047b50-ad46-4567-9925-f4281a32adfe","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-dc7d81/rate-test-model-dc7d81\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-dc7d81/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T15:17:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fb047b50-ad46-4567-9925-f4281a32adfe","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T15:17:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fb047b50-ad46-4567-9925-f4281a32adfe","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T15:17:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fb047b50-ad46-4567-9925-f4281a32adfe","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-24T15:17:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fb047b50-ad46-4567-9925-f4281a32adfe","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T15:17:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fb047b50-ad46-4567-9925-f4281a32adfe","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T15:17:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8d94b742-13ff-4bb2-9d28-223b90616114","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:37496","PortSpecifier":{"PortValue":37496}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8d94b742-13ff-4bb2-9d28-223b90616114","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-8ea489.apps.3be3295e-9019-4b6b-9df8-99ce19d48613.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T15:17:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8d94b742-13ff-4bb2-9d28-223b90616114","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:37496","PortSpecifier":{"PortValue":37496}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784906230,"nanos":364256409},"http":{"id":"8d94b742-13ff-4bb2-9d28-223b90616114","method":"POST","headers":{":authority":"e2e-shared-b-8ea489.apps.3be3295e-9019-4b6b-9df8-99ce19d48613.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T15:17:10Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8d94b742-13ff-4bb2-9d28-223b90616114","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T15:17:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8d94b742-13ff-4bb2-9d28-223b90616114","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e9103260-9a05-4d99-8fa1-24683f35cf9c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac7166a7-f0ef-4ddf-98c5-a70fe2accb13"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/99ce19d48613"]}} {"level":"debug","ts":"2026-07-24T15:17:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8d94b742-13ff-4bb2-9d28-223b90616114","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/99ce19d48613"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac7166a7-f0ef-4ddf-98c5-a70fe2accb13"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e9103260-9a05-4d99-8fa1-24683f35cf9c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3c418244c8795aafcaa38df340a22943da5e6dc77f4f8c2d142afad2a76c0fc8"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.76:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-8ea489.apps.3be3295e-9019-4b6b-9df8-99ce19d48613.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T15:17:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8d94b742-13ff-4bb2-9d28-223b90616114","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T15:17:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8d94b742-13ff-4bb2-9d28-223b90616114","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T15:17:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8d94b742-13ff-4bb2-9d28-223b90616114","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-8ea489/rate-test-model-8ea489\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-8ea489/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T15:17:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8d94b742-13ff-4bb2-9d28-223b90616114","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T15:17:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8d94b742-13ff-4bb2-9d28-223b90616114","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T15:17:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8d94b742-13ff-4bb2-9d28-223b90616114","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-24T15:17:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8d94b742-13ff-4bb2-9d28-223b90616114","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T15:17:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8d94b742-13ff-4bb2-9d28-223b90616114","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T15:17:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"408f408d-86ba-48d9-8622-a2b07a601568","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:53118","PortSpecifier":{"PortValue":53118}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"408f408d-86ba-48d9-8622-a2b07a601568","method":"POST","path":"/ai-tenant-e2e-shared-a-dc7d81/rate-test-model-dc7d81/v1/completions","host":"e2e-shared-a-dc7d81.apps.3be3295e-9019-4b6b-9df8-99ce19d48613.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T15:17:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"408f408d-86ba-48d9-8622-a2b07a601568","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:53118","PortSpecifier":{"PortValue":53118}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784906230,"nanos":402983958},"http":{"id":"408f408d-86ba-48d9-8622-a2b07a601568","method":"POST","headers":{":authority":"e2e-shared-a-dc7d81.apps.3be3295e-9019-4b6b-9df8-99ce19d48613.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-dc7d81/rate-test-model-dc7d81/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T15:17:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"408f408d-86ba-48d9-8622-a2b07a601568","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-5uXqxsAHnCoOF9Nu_dkB8pv09a8rFLpKClmZk8BqyVTXIFzzoVCoQXEQxZGr"} {"level":"debug","ts":"2026-07-24T15:17:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"408f408d-86ba-48d9-8622-a2b07a601568","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-dc7d81.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-5uXqxsAHnCoOF9Nu_dkB8pv09a8rFLpKClmZk8BqyVTXIFzzoVCoQXEQxZGr\"}"} {"level":"debug","ts":"2026-07-24T15:17:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"408f408d-86ba-48d9-8622-a2b07a601568","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-dc7d81.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7c331479-a25c-4399-8e05-cf34ddeed09a","keyName":"e2e-rate-a-329362","subscription":"e2e-rate-iso-a-329362","tenant":"e2e-shared-a-dc7d81","userId":"7c331479-a25c-4399-8e05-cf34ddeed09a","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T15:17:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"408f408d-86ba-48d9-8622-a2b07a601568","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-dc7d81.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-dc7d81/rate-test-model-dc7d81\",\"requestedSubscription\":\"e2e-rate-iso-a-329362\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-24T15:17:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"408f408d-86ba-48d9-8622-a2b07a601568","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-dc7d81.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-dc7d81","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-329362","namespace":"ai-tenant-e2e-shared-a-dc7d81","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-dc7d81/rate-test-model-dc7d81"}} {"level":"debug","ts":"2026-07-24T15:17:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"408f408d-86ba-48d9-8622-a2b07a601568","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T15:17:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"408f408d-86ba-48d9-8622-a2b07a601568","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T15:17:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"408f408d-86ba-48d9-8622-a2b07a601568","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T15:17:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"408f408d-86ba-48d9-8622-a2b07a601568","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-dc7d81/rate-test-model-dc7d81\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-dc7d81/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T15:17:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"408f408d-86ba-48d9-8622-a2b07a601568","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T15:17:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"408f408d-86ba-48d9-8622-a2b07a601568","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-329362"} {"level":"debug","ts":"2026-07-24T15:17:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"408f408d-86ba-48d9-8622-a2b07a601568","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T15:17:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"408f408d-86ba-48d9-8622-a2b07a601568","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T15:17:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"408f408d-86ba-48d9-8622-a2b07a601568","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"7c331479-a25c-4399-8e05-cf34ddeed09a","keyName":"e2e-rate-a-329362","selected_subscription":"e2e-rate-iso-a-329362","selected_subscription_key":"ai-tenant-e2e-shared-a-dc7d81/e2e-rate-iso-a-329362@ai-tenant-e2e-shared-a-dc7d81/rate-test-model-dc7d81","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-dc7d81","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-329362","namespace":"ai-tenant-e2e-shared-a-dc7d81","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-dc7d81/rate-test-model-dc7d81"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-24T15:17:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"408f408d-86ba-48d9-8622-a2b07a601568","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T15:17:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"408f408d-86ba-48d9-8622-a2b07a601568","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T15:17:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f12f9c87-a945-456a-9165-09c207e4adc6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:53132","PortSpecifier":{"PortValue":53132}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f12f9c87-a945-456a-9165-09c207e4adc6","method":"POST","path":"/ai-tenant-e2e-shared-a-dc7d81/rate-test-model-dc7d81/v1/completions","host":"e2e-shared-a-dc7d81.apps.3be3295e-9019-4b6b-9df8-99ce19d48613.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T15:17:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f12f9c87-a945-456a-9165-09c207e4adc6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:53132","PortSpecifier":{"PortValue":53132}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784906231,"nanos":444972756},"http":{"id":"f12f9c87-a945-456a-9165-09c207e4adc6","method":"POST","headers":{":authority":"e2e-shared-a-dc7d81.apps.3be3295e-9019-4b6b-9df8-99ce19d48613.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-dc7d81/rate-test-model-dc7d81/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T15:17:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f12f9c87-a945-456a-9165-09c207e4adc6","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-5uXqxsAHnCoOF9Nu_dkB8pv09a8rFLpKClmZk8BqyVTXIFzzoVCoQXEQxZGr"} {"level":"debug","ts":"2026-07-24T15:17:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f12f9c87-a945-456a-9165-09c207e4adc6","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-dc7d81.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-5uXqxsAHnCoOF9Nu_dkB8pv09a8rFLpKClmZk8BqyVTXIFzzoVCoQXEQxZGr\"}"} {"level":"debug","ts":"2026-07-24T15:17:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f12f9c87-a945-456a-9165-09c207e4adc6","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-dc7d81.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7c331479-a25c-4399-8e05-cf34ddeed09a","keyName":"e2e-rate-a-329362","subscription":"e2e-rate-iso-a-329362","tenant":"e2e-shared-a-dc7d81","userId":"7c331479-a25c-4399-8e05-cf34ddeed09a","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T15:17:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f12f9c87-a945-456a-9165-09c207e4adc6","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-dc7d81.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-dc7d81/rate-test-model-dc7d81\",\"requestedSubscription\":\"e2e-rate-iso-a-329362\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-24T15:17:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f12f9c87-a945-456a-9165-09c207e4adc6","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-dc7d81.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-dc7d81","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-329362","namespace":"ai-tenant-e2e-shared-a-dc7d81","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-dc7d81/rate-test-model-dc7d81"}} {"level":"debug","ts":"2026-07-24T15:17:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f12f9c87-a945-456a-9165-09c207e4adc6","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T15:17:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f12f9c87-a945-456a-9165-09c207e4adc6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T15:17:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f12f9c87-a945-456a-9165-09c207e4adc6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T15:17:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f12f9c87-a945-456a-9165-09c207e4adc6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-dc7d81/rate-test-model-dc7d81\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-dc7d81/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T15:17:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f12f9c87-a945-456a-9165-09c207e4adc6","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T15:17:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f12f9c87-a945-456a-9165-09c207e4adc6","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-329362"} {"level":"debug","ts":"2026-07-24T15:17:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f12f9c87-a945-456a-9165-09c207e4adc6","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T15:17:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f12f9c87-a945-456a-9165-09c207e4adc6","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T15:17:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f12f9c87-a945-456a-9165-09c207e4adc6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"7c331479-a25c-4399-8e05-cf34ddeed09a","keyName":"e2e-rate-a-329362","selected_subscription":"e2e-rate-iso-a-329362","selected_subscription_key":"ai-tenant-e2e-shared-a-dc7d81/e2e-rate-iso-a-329362@ai-tenant-e2e-shared-a-dc7d81/rate-test-model-dc7d81","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-dc7d81","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-329362","namespace":"ai-tenant-e2e-shared-a-dc7d81","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-dc7d81/rate-test-model-dc7d81"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-24T15:17:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f12f9c87-a945-456a-9165-09c207e4adc6","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T15:17:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f12f9c87-a945-456a-9165-09c207e4adc6","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T15:17:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b43d4ea7-0b15-46f3-8728-7e393a4ea3e2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:53136","PortSpecifier":{"PortValue":53136}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b43d4ea7-0b15-46f3-8728-7e393a4ea3e2","method":"POST","path":"/ai-tenant-e2e-shared-a-dc7d81/rate-test-model-dc7d81/v1/completions","host":"e2e-shared-a-dc7d81.apps.3be3295e-9019-4b6b-9df8-99ce19d48613.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T15:17:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b43d4ea7-0b15-46f3-8728-7e393a4ea3e2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:53136","PortSpecifier":{"PortValue":53136}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784906232,"nanos":483810057},"http":{"id":"b43d4ea7-0b15-46f3-8728-7e393a4ea3e2","method":"POST","headers":{":authority":"e2e-shared-a-dc7d81.apps.3be3295e-9019-4b6b-9df8-99ce19d48613.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-dc7d81/rate-test-model-dc7d81/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T15:17:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b43d4ea7-0b15-46f3-8728-7e393a4ea3e2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-5uXqxsAHnCoOF9Nu_dkB8pv09a8rFLpKClmZk8BqyVTXIFzzoVCoQXEQxZGr"} {"level":"debug","ts":"2026-07-24T15:17:12Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b43d4ea7-0b15-46f3-8728-7e393a4ea3e2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-dc7d81.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-5uXqxsAHnCoOF9Nu_dkB8pv09a8rFLpKClmZk8BqyVTXIFzzoVCoQXEQxZGr\"}"} {"level":"debug","ts":"2026-07-24T15:17:12Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b43d4ea7-0b15-46f3-8728-7e393a4ea3e2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-dc7d81.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7c331479-a25c-4399-8e05-cf34ddeed09a","keyName":"e2e-rate-a-329362","subscription":"e2e-rate-iso-a-329362","tenant":"e2e-shared-a-dc7d81","userId":"7c331479-a25c-4399-8e05-cf34ddeed09a","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T15:17:12Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b43d4ea7-0b15-46f3-8728-7e393a4ea3e2","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-dc7d81.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-dc7d81/rate-test-model-dc7d81\",\"requestedSubscription\":\"e2e-rate-iso-a-329362\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-24T15:17:12Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b43d4ea7-0b15-46f3-8728-7e393a4ea3e2","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-dc7d81.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-dc7d81","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-329362","namespace":"ai-tenant-e2e-shared-a-dc7d81","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-dc7d81/rate-test-model-dc7d81"}} {"level":"debug","ts":"2026-07-24T15:17:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b43d4ea7-0b15-46f3-8728-7e393a4ea3e2","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T15:17:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b43d4ea7-0b15-46f3-8728-7e393a4ea3e2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T15:17:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b43d4ea7-0b15-46f3-8728-7e393a4ea3e2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T15:17:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b43d4ea7-0b15-46f3-8728-7e393a4ea3e2","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T15:17:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b43d4ea7-0b15-46f3-8728-7e393a4ea3e2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-dc7d81/rate-test-model-dc7d81\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-dc7d81/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T15:17:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b43d4ea7-0b15-46f3-8728-7e393a4ea3e2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-329362"} {"level":"debug","ts":"2026-07-24T15:17:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b43d4ea7-0b15-46f3-8728-7e393a4ea3e2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T15:17:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b43d4ea7-0b15-46f3-8728-7e393a4ea3e2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T15:17:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b43d4ea7-0b15-46f3-8728-7e393a4ea3e2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"7c331479-a25c-4399-8e05-cf34ddeed09a","keyName":"e2e-rate-a-329362","selected_subscription":"e2e-rate-iso-a-329362","selected_subscription_key":"ai-tenant-e2e-shared-a-dc7d81/e2e-rate-iso-a-329362@ai-tenant-e2e-shared-a-dc7d81/rate-test-model-dc7d81","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-dc7d81","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-329362","namespace":"ai-tenant-e2e-shared-a-dc7d81","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-dc7d81/rate-test-model-dc7d81"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-24T15:17:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b43d4ea7-0b15-46f3-8728-7e393a4ea3e2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T15:17:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b43d4ea7-0b15-46f3-8728-7e393a4ea3e2","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T15:17:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"eb358f75-6b65-459a-9b4b-f75282c93e30","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:37498","PortSpecifier":{"PortValue":37498}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"eb358f75-6b65-459a-9b4b-f75282c93e30","method":"POST","path":"/ai-tenant-e2e-shared-b-8ea489/rate-test-model-8ea489/v1/completions","host":"e2e-shared-b-8ea489.apps.3be3295e-9019-4b6b-9df8-99ce19d48613.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T15:17:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"eb358f75-6b65-459a-9b4b-f75282c93e30","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:37498","PortSpecifier":{"PortValue":37498}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784906232,"nanos":519449357},"http":{"id":"eb358f75-6b65-459a-9b4b-f75282c93e30","method":"POST","headers":{":authority":"e2e-shared-b-8ea489.apps.3be3295e-9019-4b6b-9df8-99ce19d48613.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-8ea489/rate-test-model-8ea489/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T15:17:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"eb358f75-6b65-459a-9b4b-f75282c93e30","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1HeJO8dATJHRJXqYw_QKL5HsulJs4rgByLxPpljZIsDmoWtATxZbfrS9zzoMA"} {"level":"debug","ts":"2026-07-24T15:17:12Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"eb358f75-6b65-459a-9b4b-f75282c93e30","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-8ea489.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1HeJO8dATJHRJXqYw_QKL5HsulJs4rgByLxPpljZIsDmoWtATxZbfrS9zzoMA\"}"} {"level":"debug","ts":"2026-07-24T15:17:12Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"eb358f75-6b65-459a-9b4b-f75282c93e30","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-8ea489.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d411ffcf-cb19-4320-a6dd-89792fc20544","keyName":"e2e-rate-b-329362","subscription":"e2e-rate-iso-b-329362","tenant":"e2e-shared-b-8ea489","userId":"d411ffcf-cb19-4320-a6dd-89792fc20544","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T15:17:12Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"eb358f75-6b65-459a-9b4b-f75282c93e30","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-8ea489.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-8ea489/rate-test-model-8ea489\",\"requestedSubscription\":\"e2e-rate-iso-b-329362\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-24T15:17:12Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"eb358f75-6b65-459a-9b4b-f75282c93e30","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-8ea489.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8ea489","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-329362","namespace":"ai-tenant-e2e-shared-b-8ea489","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-8ea489/rate-test-model-8ea489"}} {"level":"debug","ts":"2026-07-24T15:17:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"eb358f75-6b65-459a-9b4b-f75282c93e30","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T15:17:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eb358f75-6b65-459a-9b4b-f75282c93e30","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T15:17:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eb358f75-6b65-459a-9b4b-f75282c93e30","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T15:17:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eb358f75-6b65-459a-9b4b-f75282c93e30","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-8ea489/rate-test-model-8ea489\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-8ea489/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T15:17:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eb358f75-6b65-459a-9b4b-f75282c93e30","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T15:17:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eb358f75-6b65-459a-9b4b-f75282c93e30","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-329362"} {"level":"debug","ts":"2026-07-24T15:17:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eb358f75-6b65-459a-9b4b-f75282c93e30","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T15:17:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eb358f75-6b65-459a-9b4b-f75282c93e30","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T15:17:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eb358f75-6b65-459a-9b4b-f75282c93e30","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d411ffcf-cb19-4320-a6dd-89792fc20544","keyName":"e2e-rate-b-329362","selected_subscription":"e2e-rate-iso-b-329362","selected_subscription_key":"ai-tenant-e2e-shared-b-8ea489/e2e-rate-iso-b-329362@ai-tenant-e2e-shared-b-8ea489/rate-test-model-8ea489","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8ea489","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-329362","namespace":"ai-tenant-e2e-shared-b-8ea489","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-8ea489/rate-test-model-8ea489"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-24T15:17:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"eb358f75-6b65-459a-9b4b-f75282c93e30","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T15:17:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"eb358f75-6b65-459a-9b4b-f75282c93e30","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T15:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/09bae11e466c1b7fd4a4390697823bdeb809c77799dcbe3c253ff8186111edd5"} {"level":"info","ts":"2026-07-24T15:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b6afbb0129bf35ade2dff4570abfcc0353e3fe180f9f0c71ad102c06b223653d"} {"level":"info","ts":"2026-07-24T15:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/55a5d4ab21bb36f7f40978ce640f1e48428a71b01d8a07eff1fd4260ceb86991"} {"level":"info","ts":"2026-07-24T15:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/499f7bb1c8dda74259ca646913acc34b1ef2a1884926d433d10d853def921b85"} {"level":"info","ts":"2026-07-24T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/894852862e694c1a8cc4de376deb5063c657089f3fdc0afc53c0b9e92dceaa71"} {"level":"info","ts":"2026-07-24T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/83c8196c690585df78e9d0a89dac8af76b3ba3959ca1d0d967e78a6c34efdd52"} {"level":"info","ts":"2026-07-24T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6771e3f926351e7e7eea11533db2ea5dd4b06837db63431c8ca754ee0b6658f9"} {"level":"info","ts":"2026-07-24T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e43a58d97b85af61310417750a457e79000576dc5901f098b80a99b396ddac3e"} {"level":"info","ts":"2026-07-24T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8f0d3a863e4aaa3d0454c2b21d826eb257406b1e3c109355f7ec237145bacefd"} {"level":"info","ts":"2026-07-24T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/759b45c05cdd6b3edf3f3c5ea6df90383879f1ba2513a2429afd462c751a1355"} {"level":"info","ts":"2026-07-24T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b63e986f099db6dded059b613fdc61522ac42647ee6624458f88a0fe4a80b4c6"} {"level":"info","ts":"2026-07-24T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fb1c239a489ad83157cab777f895c96c594822cdbb7003bc1fdb5a2f9d4ab1c0"} {"level":"info","ts":"2026-07-24T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9b1d53f5f7f12a77f719eed612394f0730e7fbef9e68a156b44f8b61459f8be5"} {"level":"info","ts":"2026-07-24T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3c418244c8795aafcaa38df340a22943da5e6dc77f4f8c2d142afad2a76c0fc8"} {"level":"info","ts":"2026-07-24T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a54aceada7cfcc76c05c9ba322b82d92df7e27cbbf943a766117a7127d669fc6"} {"level":"info","ts":"2026-07-24T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cac0d1ed8c9ebc34639a723d1de883cd26d05c7a3fb8fe0f74efda5642dff75a"} {"level":"info","ts":"2026-07-24T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a475b67fc0171176cf1b95af1b4eedf3fdee92674df8efc4e08205be8a14044a"} {"level":"info","ts":"2026-07-24T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7b1ef7cbc9f4bd6212c3657be9cf2e8359d760550e0722cee4ced1d55b2cb2d4"} {"level":"info","ts":"2026-07-24T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b84477ba225535edbb20da780dab1124e1c77a296744f788aa6e15718c33c69a"} {"level":"info","ts":"2026-07-24T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e0229b8129d3c1f10d17e0301e31d9d1f1c3d637f2ea292b6a5a9570bddf6082"} {"level":"info","ts":"2026-07-24T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ce47e51606e762b3b35d49a242f02e04ddffc214b58fa99198ebb8e389bef333"} {"level":"info","ts":"2026-07-24T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/016c0ddecb4c0887d62fd7497af33190e4653b22059f94f127356f0738724b32"} {"level":"info","ts":"2026-07-24T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/89fb2f2d7d344454a4a5df84861dcf6c08d0309e6c7638a335fe5444338e354e"} {"level":"info","ts":"2026-07-24T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dd30900c228ae8cacb1f6f23d26ed55b386246809e20bac7318284c41629a1e4"} {"level":"info","ts":"2026-07-24T15:18:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5790c6d2-b37f-4ed5-a24a-ae13971dd020","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:39574","PortSpecifier":{"PortValue":39574}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5790c6d2-b37f-4ed5-a24a-ae13971dd020","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.3be3295e-9019-4b6b-9df8-99ce19d48613.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T15:18:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5790c6d2-b37f-4ed5-a24a-ae13971dd020","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:39574","PortSpecifier":{"PortValue":39574}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784906304,"nanos":334040334},"http":{"id":"5790c6d2-b37f-4ed5-a24a-ae13971dd020","method":"POST","headers":{":authority":"maas.apps.3be3295e-9019-4b6b-9df8-99ce19d48613.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T15:18:24Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5790c6d2-b37f-4ed5-a24a-ae13971dd020","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T15:18:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5790c6d2-b37f-4ed5-a24a-ae13971dd020","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e9103260-9a05-4d99-8fa1-24683f35cf9c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac7166a7-f0ef-4ddf-98c5-a70fe2accb13"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/99ce19d48613"]}} {"level":"debug","ts":"2026-07-24T15:18:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5790c6d2-b37f-4ed5-a24a-ae13971dd020","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/99ce19d48613"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac7166a7-f0ef-4ddf-98c5-a70fe2accb13"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e9103260-9a05-4d99-8fa1-24683f35cf9c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.3be3295e-9019-4b6b-9df8-99ce19d48613.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T15:18:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5790c6d2-b37f-4ed5-a24a-ae13971dd020","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T15:18:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5790c6d2-b37f-4ed5-a24a-ae13971dd020","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T15:18:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5790c6d2-b37f-4ed5-a24a-ae13971dd020","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T15:18:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5790c6d2-b37f-4ed5-a24a-ae13971dd020","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T15:18:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5790c6d2-b37f-4ed5-a24a-ae13971dd020","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T15:18:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5790c6d2-b37f-4ed5-a24a-ae13971dd020","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-24T15:18:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5790c6d2-b37f-4ed5-a24a-ae13971dd020","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T15:18:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5790c6d2-b37f-4ed5-a24a-ae13971dd020","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T15:18:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9a2d5d4c-5a2f-4df5-badb-6fe085f0b10d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:39580","PortSpecifier":{"PortValue":39580}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9a2d5d4c-5a2f-4df5-badb-6fe085f0b10d","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","host":"maas.apps.3be3295e-9019-4b6b-9df8-99ce19d48613.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T15:18:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9a2d5d4c-5a2f-4df5-badb-6fe085f0b10d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:39580","PortSpecifier":{"PortValue":39580}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784906304,"nanos":377707415},"http":{"id":"9a2d5d4c-5a2f-4df5-badb-6fe085f0b10d","method":"POST","headers":{":authority":"maas.apps.3be3295e-9019-4b6b-9df8-99ce19d48613.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T15:18:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9a2d5d4c-5a2f-4df5-badb-6fe085f0b10d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-vDUcGz7HPdf9e86i_QIUXO6jm9g240UEqeYR1qSPZrMtfSTW0ux4GgoZO90B"} {"level":"debug","ts":"2026-07-24T15:18:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9a2d5d4c-5a2f-4df5-badb-6fe085f0b10d","config":"apiKeyValidation","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-vDUcGz7HPdf9e86i_QIUXO6jm9g240UEqeYR1qSPZrMtfSTW0ux4GgoZO90B\"}"} {"level":"debug","ts":"2026-07-24T15:18:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9a2d5d4c-5a2f-4df5-badb-6fe085f0b10d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4ab74c2c-b64d-4236-a592-076113e8030a","keyName":"e2e-ipp-default","subscription":"simulator-subscription","tenant":"models-as-a-service","userId":"4ab74c2c-b64d-4236-a592-076113e8030a","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T15:18:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9a2d5d4c-5a2f-4df5-badb-6fe085f0b10d","config":"subscription-info","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-24T15:18:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9a2d5d4c-5a2f-4df5-badb-6fe085f0b10d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}} {"level":"debug","ts":"2026-07-24T15:18:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9a2d5d4c-5a2f-4df5-badb-6fe085f0b10d","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}}},"context":{"context_extensions":{"host":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.3be3295e-9019-4b6b-9df8-99ce19d48613.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T15:18:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9a2d5d4c-5a2f-4df5-badb-6fe085f0b10d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T15:18:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9a2d5d4c-5a2f-4df5-badb-6fe085f0b10d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T15:18:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9a2d5d4c-5a2f-4df5-badb-6fe085f0b10d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T15:18:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9a2d5d4c-5a2f-4df5-badb-6fe085f0b10d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T15:18:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9a2d5d4c-5a2f-4df5-badb-6fe085f0b10d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T15:18:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9a2d5d4c-5a2f-4df5-badb-6fe085f0b10d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T15:18:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9a2d5d4c-5a2f-4df5-badb-6fe085f0b10d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"} {"level":"debug","ts":"2026-07-24T15:18:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9a2d5d4c-5a2f-4df5-badb-6fe085f0b10d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"4ab74c2c-b64d-4236-a592-076113e8030a","keyName":"e2e-ipp-default","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-24T15:18:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9a2d5d4c-5a2f-4df5-badb-6fe085f0b10d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T15:18:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9a2d5d4c-5a2f-4df5-badb-6fe085f0b10d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T15:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e6341ca90d08ee83ae7ae7e4793473187e4f0b0d9917fe9ebeae961b5c0399b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:19:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:19:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e6341ca90d08ee83ae7ae7e4793473187e4f0b0d9917fe9ebeae961b5c0399b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e6341ca90d08ee83ae7ae7e4793473187e4f0b0d9917fe9ebeae961b5c0399b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e6341ca90d08ee83ae7ae7e4793473187e4f0b0d9917fe9ebeae961b5c0399b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T15:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e6341ca90d08ee83ae7ae7e4793473187e4f0b0d9917fe9ebeae961b5c0399b"} {"level":"debug","ts":"2026-07-24T15:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e6341ca90d08ee83ae7ae7e4793473187e4f0b0d9917fe9ebeae961b5c0399b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T15:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e6341ca90d08ee83ae7ae7e4793473187e4f0b0d9917fe9ebeae961b5c0399b"} {"level":"debug","ts":"2026-07-24T15:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e6341ca90d08ee83ae7ae7e4793473187e4f0b0d9917fe9ebeae961b5c0399b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:19:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:19:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4e6341ca90d08ee83ae7ae7e4793473187e4f0b0d9917fe9ebeae961b5c0399b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e6341ca90d08ee83ae7ae7e4793473187e4f0b0d9917fe9ebeae961b5c0399b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a2eb6c5d0d22cecc8e6640d6daf679d2749f52b2202e69db5974f9a345c48c90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:19:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:19:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a2eb6c5d0d22cecc8e6640d6daf679d2749f52b2202e69db5974f9a345c48c90","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e6341ca90d08ee83ae7ae7e4793473187e4f0b0d9917fe9ebeae961b5c0399b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a2eb6c5d0d22cecc8e6640d6daf679d2749f52b2202e69db5974f9a345c48c90","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a2eb6c5d0d22cecc8e6640d6daf679d2749f52b2202e69db5974f9a345c48c90","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T15:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2eb6c5d0d22cecc8e6640d6daf679d2749f52b2202e69db5974f9a345c48c90"} {"level":"debug","ts":"2026-07-24T15:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a2eb6c5d0d22cecc8e6640d6daf679d2749f52b2202e69db5974f9a345c48c90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:19:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:19:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a2eb6c5d0d22cecc8e6640d6daf679d2749f52b2202e69db5974f9a345c48c90"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e6341ca90d08ee83ae7ae7e4793473187e4f0b0d9917fe9ebeae961b5c0399b"} {"level":"info","ts":"2026-07-24T15:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a2eb6c5d0d22cecc8e6640d6daf679d2749f52b2202e69db5974f9a345c48c90","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a2eb6c5d0d22cecc8e6640d6daf679d2749f52b2202e69db5974f9a345c48c90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:19:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:19:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2eb6c5d0d22cecc8e6640d6daf679d2749f52b2202e69db5974f9a345c48c90"} {"level":"info","ts":"2026-07-24T15:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a2eb6c5d0d22cecc8e6640d6daf679d2749f52b2202e69db5974f9a345c48c90","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a2eb6c5d0d22cecc8e6640d6daf679d2749f52b2202e69db5974f9a345c48c90","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T15:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2eb6c5d0d22cecc8e6640d6daf679d2749f52b2202e69db5974f9a345c48c90"} {"level":"debug","ts":"2026-07-24T15:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a2eb6c5d0d22cecc8e6640d6daf679d2749f52b2202e69db5974f9a345c48c90","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T15:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2eb6c5d0d22cecc8e6640d6daf679d2749f52b2202e69db5974f9a345c48c90"} {"level":"debug","ts":"2026-07-24T15:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a2eb6c5d0d22cecc8e6640d6daf679d2749f52b2202e69db5974f9a345c48c90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:19:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:19:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a2eb6c5d0d22cecc8e6640d6daf679d2749f52b2202e69db5974f9a345c48c90"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a2eb6c5d0d22cecc8e6640d6daf679d2749f52b2202e69db5974f9a345c48c90","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a2eb6c5d0d22cecc8e6640d6daf679d2749f52b2202e69db5974f9a345c48c90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:19:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:19:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2eb6c5d0d22cecc8e6640d6daf679d2749f52b2202e69db5974f9a345c48c90"} {"level":"info","ts":"2026-07-24T15:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a2eb6c5d0d22cecc8e6640d6daf679d2749f52b2202e69db5974f9a345c48c90","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a2eb6c5d0d22cecc8e6640d6daf679d2749f52b2202e69db5974f9a345c48c90","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a2eb6c5d0d22cecc8e6640d6daf679d2749f52b2202e69db5974f9a345c48c90","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b55f06f80108444f54123126e1c0b19a2ee1520e04c02130e2587459e38f006b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:19:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:19:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2eb6c5d0d22cecc8e6640d6daf679d2749f52b2202e69db5974f9a345c48c90"} {"level":"info","ts":"2026-07-24T15:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b55f06f80108444f54123126e1c0b19a2ee1520e04c02130e2587459e38f006b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a2eb6c5d0d22cecc8e6640d6daf679d2749f52b2202e69db5974f9a345c48c90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:19:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:19:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a2eb6c5d0d22cecc8e6640d6daf679d2749f52b2202e69db5974f9a345c48c90"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b55f06f80108444f54123126e1c0b19a2ee1520e04c02130e2587459e38f006b"} {"level":"info","ts":"2026-07-24T15:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b55f06f80108444f54123126e1c0b19a2ee1520e04c02130e2587459e38f006b"} {"level":"info","ts":"2026-07-24T15:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a2eb6c5d0d22cecc8e6640d6daf679d2749f52b2202e69db5974f9a345c48c90","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b55f06f80108444f54123126e1c0b19a2ee1520e04c02130e2587459e38f006b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:19:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:19:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b55f06f80108444f54123126e1c0b19a2ee1520e04c02130e2587459e38f006b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2eb6c5d0d22cecc8e6640d6daf679d2749f52b2202e69db5974f9a345c48c90"} {"level":"info","ts":"2026-07-24T15:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b55f06f80108444f54123126e1c0b19a2ee1520e04c02130e2587459e38f006b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a2eb6c5d0d22cecc8e6640d6daf679d2749f52b2202e69db5974f9a345c48c90","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b55f06f80108444f54123126e1c0b19a2ee1520e04c02130e2587459e38f006b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:19:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:19:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b55f06f80108444f54123126e1c0b19a2ee1520e04c02130e2587459e38f006b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b55f06f80108444f54123126e1c0b19a2ee1520e04c02130e2587459e38f006b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T15:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b55f06f80108444f54123126e1c0b19a2ee1520e04c02130e2587459e38f006b"} {"level":"debug","ts":"2026-07-24T15:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b55f06f80108444f54123126e1c0b19a2ee1520e04c02130e2587459e38f006b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T15:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b55f06f80108444f54123126e1c0b19a2ee1520e04c02130e2587459e38f006b"} {"level":"debug","ts":"2026-07-24T15:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b55f06f80108444f54123126e1c0b19a2ee1520e04c02130e2587459e38f006b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:19:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:19:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b55f06f80108444f54123126e1c0b19a2ee1520e04c02130e2587459e38f006b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b55f06f80108444f54123126e1c0b19a2ee1520e04c02130e2587459e38f006b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b55f06f80108444f54123126e1c0b19a2ee1520e04c02130e2587459e38f006b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:19:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:19:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b55f06f80108444f54123126e1c0b19a2ee1520e04c02130e2587459e38f006b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b55f06f80108444f54123126e1c0b19a2ee1520e04c02130e2587459e38f006b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b55f06f80108444f54123126e1c0b19a2ee1520e04c02130e2587459e38f006b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T15:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b55f06f80108444f54123126e1c0b19a2ee1520e04c02130e2587459e38f006b"} {"level":"debug","ts":"2026-07-24T15:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"593137e58501e12ecead0e127e24a6c3bd36eb28c3b838cdd157ad6efadf78a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:19:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:19:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b55f06f80108444f54123126e1c0b19a2ee1520e04c02130e2587459e38f006b"} {"level":"info","ts":"2026-07-24T15:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"593137e58501e12ecead0e127e24a6c3bd36eb28c3b838cdd157ad6efadf78a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b55f06f80108444f54123126e1c0b19a2ee1520e04c02130e2587459e38f006b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:19:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:19:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b55f06f80108444f54123126e1c0b19a2ee1520e04c02130e2587459e38f006b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/593137e58501e12ecead0e127e24a6c3bd36eb28c3b838cdd157ad6efadf78a5"} {"level":"info","ts":"2026-07-24T15:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b55f06f80108444f54123126e1c0b19a2ee1520e04c02130e2587459e38f006b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"593137e58501e12ecead0e127e24a6c3bd36eb28c3b838cdd157ad6efadf78a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:19:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:19:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"593137e58501e12ecead0e127e24a6c3bd36eb28c3b838cdd157ad6efadf78a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b55f06f80108444f54123126e1c0b19a2ee1520e04c02130e2587459e38f006b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"593137e58501e12ecead0e127e24a6c3bd36eb28c3b838cdd157ad6efadf78a5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T15:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/593137e58501e12ecead0e127e24a6c3bd36eb28c3b838cdd157ad6efadf78a5"} {"level":"debug","ts":"2026-07-24T15:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"593137e58501e12ecead0e127e24a6c3bd36eb28c3b838cdd157ad6efadf78a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:19:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:19:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["593137e58501e12ecead0e127e24a6c3bd36eb28c3b838cdd157ad6efadf78a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b55f06f80108444f54123126e1c0b19a2ee1520e04c02130e2587459e38f006b"} {"level":"info","ts":"2026-07-24T15:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"593137e58501e12ecead0e127e24a6c3bd36eb28c3b838cdd157ad6efadf78a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"593137e58501e12ecead0e127e24a6c3bd36eb28c3b838cdd157ad6efadf78a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:19:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:19:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"593137e58501e12ecead0e127e24a6c3bd36eb28c3b838cdd157ad6efadf78a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"593137e58501e12ecead0e127e24a6c3bd36eb28c3b838cdd157ad6efadf78a5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T15:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/593137e58501e12ecead0e127e24a6c3bd36eb28c3b838cdd157ad6efadf78a5"} {"level":"debug","ts":"2026-07-24T15:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"593137e58501e12ecead0e127e24a6c3bd36eb28c3b838cdd157ad6efadf78a5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T15:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/593137e58501e12ecead0e127e24a6c3bd36eb28c3b838cdd157ad6efadf78a5"} {"level":"debug","ts":"2026-07-24T15:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"593137e58501e12ecead0e127e24a6c3bd36eb28c3b838cdd157ad6efadf78a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:19:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:19:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["593137e58501e12ecead0e127e24a6c3bd36eb28c3b838cdd157ad6efadf78a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"593137e58501e12ecead0e127e24a6c3bd36eb28c3b838cdd157ad6efadf78a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"593137e58501e12ecead0e127e24a6c3bd36eb28c3b838cdd157ad6efadf78a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:19:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:19:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"593137e58501e12ecead0e127e24a6c3bd36eb28c3b838cdd157ad6efadf78a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"593137e58501e12ecead0e127e24a6c3bd36eb28c3b838cdd157ad6efadf78a5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T15:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/593137e58501e12ecead0e127e24a6c3bd36eb28c3b838cdd157ad6efadf78a5"} {"level":"debug","ts":"2026-07-24T15:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"593137e58501e12ecead0e127e24a6c3bd36eb28c3b838cdd157ad6efadf78a5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T15:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/593137e58501e12ecead0e127e24a6c3bd36eb28c3b838cdd157ad6efadf78a5"} {"level":"debug","ts":"2026-07-24T15:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"593137e58501e12ecead0e127e24a6c3bd36eb28c3b838cdd157ad6efadf78a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:19:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:19:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["593137e58501e12ecead0e127e24a6c3bd36eb28c3b838cdd157ad6efadf78a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"593137e58501e12ecead0e127e24a6c3bd36eb28c3b838cdd157ad6efadf78a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"593137e58501e12ecead0e127e24a6c3bd36eb28c3b838cdd157ad6efadf78a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:19:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:19:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"593137e58501e12ecead0e127e24a6c3bd36eb28c3b838cdd157ad6efadf78a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0cd3d260cf4fe944debc85693dc1124fca18fadcc0b6d0aa5bcc0e5eebb9a29f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:19:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:19:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/593137e58501e12ecead0e127e24a6c3bd36eb28c3b838cdd157ad6efadf78a5"} {"level":"info","ts":"2026-07-24T15:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0cd3d260cf4fe944debc85693dc1124fca18fadcc0b6d0aa5bcc0e5eebb9a29f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"593137e58501e12ecead0e127e24a6c3bd36eb28c3b838cdd157ad6efadf78a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:19:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:19:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["593137e58501e12ecead0e127e24a6c3bd36eb28c3b838cdd157ad6efadf78a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0cd3d260cf4fe944debc85693dc1124fca18fadcc0b6d0aa5bcc0e5eebb9a29f"} {"level":"info","ts":"2026-07-24T15:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"593137e58501e12ecead0e127e24a6c3bd36eb28c3b838cdd157ad6efadf78a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"310fbed840060d2ffaddfd10efc4726913f7690489d4eb832ff447723823784e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:19:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:19:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"310fbed840060d2ffaddfd10efc4726913f7690489d4eb832ff447723823784e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0cd3d260cf4fe944debc85693dc1124fca18fadcc0b6d0aa5bcc0e5eebb9a29f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:19:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:19:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0cd3d260cf4fe944debc85693dc1124fca18fadcc0b6d0aa5bcc0e5eebb9a29f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/593137e58501e12ecead0e127e24a6c3bd36eb28c3b838cdd157ad6efadf78a5"} {"level":"info","ts":"2026-07-24T15:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0cd3d260cf4fe944debc85693dc1124fca18fadcc0b6d0aa5bcc0e5eebb9a29f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"593137e58501e12ecead0e127e24a6c3bd36eb28c3b838cdd157ad6efadf78a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"310fbed840060d2ffaddfd10efc4726913f7690489d4eb832ff447723823784e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:19:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:19:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/310fbed840060d2ffaddfd10efc4726913f7690489d4eb832ff447723823784e"} {"level":"info","ts":"2026-07-24T15:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"310fbed840060d2ffaddfd10efc4726913f7690489d4eb832ff447723823784e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0cd3d260cf4fe944debc85693dc1124fca18fadcc0b6d0aa5bcc0e5eebb9a29f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:19:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:19:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0cd3d260cf4fe944debc85693dc1124fca18fadcc0b6d0aa5bcc0e5eebb9a29f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"310fbed840060d2ffaddfd10efc4726913f7690489d4eb832ff447723823784e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:19:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:19:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["310fbed840060d2ffaddfd10efc4726913f7690489d4eb832ff447723823784e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0cd3d260cf4fe944debc85693dc1124fca18fadcc0b6d0aa5bcc0e5eebb9a29f"} {"level":"info","ts":"2026-07-24T15:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"310fbed840060d2ffaddfd10efc4726913f7690489d4eb832ff447723823784e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0cd3d260cf4fe944debc85693dc1124fca18fadcc0b6d0aa5bcc0e5eebb9a29f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:19:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:19:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0cd3d260cf4fe944debc85693dc1124fca18fadcc0b6d0aa5bcc0e5eebb9a29f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/593137e58501e12ecead0e127e24a6c3bd36eb28c3b838cdd157ad6efadf78a5"} {"level":"info","ts":"2026-07-24T15:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0cd3d260cf4fe944debc85693dc1124fca18fadcc0b6d0aa5bcc0e5eebb9a29f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"310fbed840060d2ffaddfd10efc4726913f7690489d4eb832ff447723823784e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:19:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:19:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"310fbed840060d2ffaddfd10efc4726913f7690489d4eb832ff447723823784e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5601aeba088665f255601bd8ae7ced03b1a175dd3e26df5fcf62e76347ff63cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:19:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:19:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/310fbed840060d2ffaddfd10efc4726913f7690489d4eb832ff447723823784e"} {"level":"info","ts":"2026-07-24T15:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5601aeba088665f255601bd8ae7ced03b1a175dd3e26df5fcf62e76347ff63cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0cd3d260cf4fe944debc85693dc1124fca18fadcc0b6d0aa5bcc0e5eebb9a29f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:19:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:19:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0cd3d260cf4fe944debc85693dc1124fca18fadcc0b6d0aa5bcc0e5eebb9a29f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"310fbed840060d2ffaddfd10efc4726913f7690489d4eb832ff447723823784e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:19:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:19:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["310fbed840060d2ffaddfd10efc4726913f7690489d4eb832ff447723823784e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0cd3d260cf4fe944debc85693dc1124fca18fadcc0b6d0aa5bcc0e5eebb9a29f"} {"level":"info","ts":"2026-07-24T15:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"310fbed840060d2ffaddfd10efc4726913f7690489d4eb832ff447723823784e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5601aeba088665f255601bd8ae7ced03b1a175dd3e26df5fcf62e76347ff63cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:19:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:19:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5601aeba088665f255601bd8ae7ced03b1a175dd3e26df5fcf62e76347ff63cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0cd3d260cf4fe944debc85693dc1124fca18fadcc0b6d0aa5bcc0e5eebb9a29f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:19:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:19:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0cd3d260cf4fe944debc85693dc1124fca18fadcc0b6d0aa5bcc0e5eebb9a29f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0cd3d260cf4fe944debc85693dc1124fca18fadcc0b6d0aa5bcc0e5eebb9a29f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"310fbed840060d2ffaddfd10efc4726913f7690489d4eb832ff447723823784e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4807da606c52ec8945542ca44137dbdc531cbbc3f88c23c972f9d4039117465d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:19:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:19:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5601aeba088665f255601bd8ae7ced03b1a175dd3e26df5fcf62e76347ff63cd"} {"level":"info","ts":"2026-07-24T15:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4807da606c52ec8945542ca44137dbdc531cbbc3f88c23c972f9d4039117465d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5601aeba088665f255601bd8ae7ced03b1a175dd3e26df5fcf62e76347ff63cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:19:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:19:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5601aeba088665f255601bd8ae7ced03b1a175dd3e26df5fcf62e76347ff63cd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5601aeba088665f255601bd8ae7ced03b1a175dd3e26df5fcf62e76347ff63cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e538ca06733156df01581941c70d0f3251a01bc5175c1a04d355e16e1c44598","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:19:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:19:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/310fbed840060d2ffaddfd10efc4726913f7690489d4eb832ff447723823784e"} {"level":"info","ts":"2026-07-24T15:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e538ca06733156df01581941c70d0f3251a01bc5175c1a04d355e16e1c44598","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0cd3d260cf4fe944debc85693dc1124fca18fadcc0b6d0aa5bcc0e5eebb9a29f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:19:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:19:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0cd3d260cf4fe944debc85693dc1124fca18fadcc0b6d0aa5bcc0e5eebb9a29f"} {"level":"info","ts":"2026-07-24T15:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0cd3d260cf4fe944debc85693dc1124fca18fadcc0b6d0aa5bcc0e5eebb9a29f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4807da606c52ec8945542ca44137dbdc531cbbc3f88c23c972f9d4039117465d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:19:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:19:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4807da606c52ec8945542ca44137dbdc531cbbc3f88c23c972f9d4039117465d"} {"level":"info","ts":"2026-07-24T15:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4807da606c52ec8945542ca44137dbdc531cbbc3f88c23c972f9d4039117465d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5601aeba088665f255601bd8ae7ced03b1a175dd3e26df5fcf62e76347ff63cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e538ca06733156df01581941c70d0f3251a01bc5175c1a04d355e16e1c44598","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:19:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:19:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e538ca06733156df01581941c70d0f3251a01bc5175c1a04d355e16e1c44598","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0cd3d260cf4fe944debc85693dc1124fca18fadcc0b6d0aa5bcc0e5eebb9a29f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:19:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:19:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0cd3d260cf4fe944debc85693dc1124fca18fadcc0b6d0aa5bcc0e5eebb9a29f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e538ca06733156df01581941c70d0f3251a01bc5175c1a04d355e16e1c44598"} {"level":"info","ts":"2026-07-24T15:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0cd3d260cf4fe944debc85693dc1124fca18fadcc0b6d0aa5bcc0e5eebb9a29f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4807da606c52ec8945542ca44137dbdc531cbbc3f88c23c972f9d4039117465d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:19:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:19:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4807da606c52ec8945542ca44137dbdc531cbbc3f88c23c972f9d4039117465d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5601aeba088665f255601bd8ae7ced03b1a175dd3e26df5fcf62e76347ff63cd"} {"level":"info","ts":"2026-07-24T15:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4807da606c52ec8945542ca44137dbdc531cbbc3f88c23c972f9d4039117465d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e538ca06733156df01581941c70d0f3251a01bc5175c1a04d355e16e1c44598","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:19:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:19:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e538ca06733156df01581941c70d0f3251a01bc5175c1a04d355e16e1c44598"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0cd3d260cf4fe944debc85693dc1124fca18fadcc0b6d0aa5bcc0e5eebb9a29f"} {"level":"info","ts":"2026-07-24T15:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e538ca06733156df01581941c70d0f3251a01bc5175c1a04d355e16e1c44598","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0cd3d260cf4fe944debc85693dc1124fca18fadcc0b6d0aa5bcc0e5eebb9a29f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4807da606c52ec8945542ca44137dbdc531cbbc3f88c23c972f9d4039117465d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:19:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:19:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4807da606c52ec8945542ca44137dbdc531cbbc3f88c23c972f9d4039117465d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e538ca06733156df01581941c70d0f3251a01bc5175c1a04d355e16e1c44598","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4807da606c52ec8945542ca44137dbdc531cbbc3f88c23c972f9d4039117465d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T15:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4807da606c52ec8945542ca44137dbdc531cbbc3f88c23c972f9d4039117465d"} {"level":"debug","ts":"2026-07-24T15:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4807da606c52ec8945542ca44137dbdc531cbbc3f88c23c972f9d4039117465d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:19:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:19:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4807da606c52ec8945542ca44137dbdc531cbbc3f88c23c972f9d4039117465d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4807da606c52ec8945542ca44137dbdc531cbbc3f88c23c972f9d4039117465d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4807da606c52ec8945542ca44137dbdc531cbbc3f88c23c972f9d4039117465d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64f15c48bc8efe4b9e42d4febf29df3807c55823bc62f4d2d49c448ed7e0f0a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:19:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:19:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e538ca06733156df01581941c70d0f3251a01bc5175c1a04d355e16e1c44598"} {"level":"info","ts":"2026-07-24T15:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64f15c48bc8efe4b9e42d4febf29df3807c55823bc62f4d2d49c448ed7e0f0a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64f15c48bc8efe4b9e42d4febf29df3807c55823bc62f4d2d49c448ed7e0f0a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64f15c48bc8efe4b9e42d4febf29df3807c55823bc62f4d2d49c448ed7e0f0a3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T15:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4807da606c52ec8945542ca44137dbdc531cbbc3f88c23c972f9d4039117465d"} {"level":"debug","ts":"2026-07-24T15:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64f15c48bc8efe4b9e42d4febf29df3807c55823bc62f4d2d49c448ed7e0f0a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:19:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:19:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64f15c48bc8efe4b9e42d4febf29df3807c55823bc62f4d2d49c448ed7e0f0a3"} {"level":"info","ts":"2026-07-24T15:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64f15c48bc8efe4b9e42d4febf29df3807c55823bc62f4d2d49c448ed7e0f0a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64f15c48bc8efe4b9e42d4febf29df3807c55823bc62f4d2d49c448ed7e0f0a3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T15:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64f15c48bc8efe4b9e42d4febf29df3807c55823bc62f4d2d49c448ed7e0f0a3"} {"level":"debug","ts":"2026-07-24T15:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64f15c48bc8efe4b9e42d4febf29df3807c55823bc62f4d2d49c448ed7e0f0a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:19:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:19:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["64f15c48bc8efe4b9e42d4febf29df3807c55823bc62f4d2d49c448ed7e0f0a3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64f15c48bc8efe4b9e42d4febf29df3807c55823bc62f4d2d49c448ed7e0f0a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64f15c48bc8efe4b9e42d4febf29df3807c55823bc62f4d2d49c448ed7e0f0a3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T15:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64f15c48bc8efe4b9e42d4febf29df3807c55823bc62f4d2d49c448ed7e0f0a3"} {"level":"debug","ts":"2026-07-24T15:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e7c617a1eea000acc8ec9e59ebe21c9c1c497ee2a5ae8acf11c294f0119817ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:19:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:19:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e7c617a1eea000acc8ec9e59ebe21c9c1c497ee2a5ae8acf11c294f0119817ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81bc37a79a68e46ff44badcff8e29e2c043e443d5dcb782d4a5c105a07bbc411","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:19:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:19:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e7c617a1eea000acc8ec9e59ebe21c9c1c497ee2a5ae8acf11c294f0119817ae"} {"level":"info","ts":"2026-07-24T15:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81bc37a79a68e46ff44badcff8e29e2c043e443d5dcb782d4a5c105a07bbc411","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e7c617a1eea000acc8ec9e59ebe21c9c1c497ee2a5ae8acf11c294f0119817ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:19:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:19:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e7c617a1eea000acc8ec9e59ebe21c9c1c497ee2a5ae8acf11c294f0119817ae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81bc37a79a68e46ff44badcff8e29e2c043e443d5dcb782d4a5c105a07bbc411"} {"level":"info","ts":"2026-07-24T15:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e7c617a1eea000acc8ec9e59ebe21c9c1c497ee2a5ae8acf11c294f0119817ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81bc37a79a68e46ff44badcff8e29e2c043e443d5dcb782d4a5c105a07bbc411","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:19:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:19:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81bc37a79a68e46ff44badcff8e29e2c043e443d5dcb782d4a5c105a07bbc411"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e7c617a1eea000acc8ec9e59ebe21c9c1c497ee2a5ae8acf11c294f0119817ae"} {"level":"info","ts":"2026-07-24T15:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81bc37a79a68e46ff44badcff8e29e2c043e443d5dcb782d4a5c105a07bbc411","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e7c617a1eea000acc8ec9e59ebe21c9c1c497ee2a5ae8acf11c294f0119817ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81bc37a79a68e46ff44badcff8e29e2c043e443d5dcb782d4a5c105a07bbc411","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T15:19:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T15:19:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81bc37a79a68e46ff44badcff8e29e2c043e443d5dcb782d4a5c105a07bbc411","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81bc37a79a68e46ff44badcff8e29e2c043e443d5dcb782d4a5c105a07bbc411","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T15:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81bc37a79a68e46ff44badcff8e29e2c043e443d5dcb782d4a5c105a07bbc411"} {"level":"debug","ts":"2026-07-24T15:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81bc37a79a68e46ff44badcff8e29e2c043e443d5dcb782d4a5c105a07bbc411","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T15:19:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T15:19:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81bc37a79a68e46ff44badcff8e29e2c043e443d5dcb782d4a5c105a07bbc411"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T15:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81bc37a79a68e46ff44badcff8e29e2c043e443d5dcb782d4a5c105a07bbc411","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T15:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81bc37a79a68e46ff44badcff8e29e2c043e443d5dcb782d4a5c105a07bbc411","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T15:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e7c617a1eea000acc8ec9e59ebe21c9c1c497ee2a5ae8acf11c294f0119817ae"} {"level":"info","ts":"2026-07-24T15:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81bc37a79a68e46ff44badcff8e29e2c043e443d5dcb782d4a5c105a07bbc411"} {"level":"info","ts":"2026-07-24T15:19:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0fef959d-128a-430d-abba-4db73336bb1e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:52472","PortSpecifier":{"PortValue":52472}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0fef959d-128a-430d-abba-4db73336bb1e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-ipp-a-bb95eb.apps.3be3295e-9019-4b6b-9df8-99ce19d48613.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T15:19:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0fef959d-128a-430d-abba-4db73336bb1e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:52472","PortSpecifier":{"PortValue":52472}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784906350,"nanos":54437617},"http":{"id":"0fef959d-128a-430d-abba-4db73336bb1e","method":"POST","headers":{":authority":"e2e-ipp-a-bb95eb.apps.3be3295e-9019-4b6b-9df8-99ce19d48613.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T15:19:10Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0fef959d-128a-430d-abba-4db73336bb1e","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T15:19:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0fef959d-128a-430d-abba-4db73336bb1e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e9103260-9a05-4d99-8fa1-24683f35cf9c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac7166a7-f0ef-4ddf-98c5-a70fe2accb13"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/99ce19d48613"]}} {"level":"debug","ts":"2026-07-24T15:19:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0fef959d-128a-430d-abba-4db73336bb1e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/99ce19d48613"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac7166a7-f0ef-4ddf-98c5-a70fe2accb13"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e9103260-9a05-4d99-8fa1-24683f35cf9c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4807da606c52ec8945542ca44137dbdc531cbbc3f88c23c972f9d4039117465d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-ipp-a-bb95eb.apps.3be3295e-9019-4b6b-9df8-99ce19d48613.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T15:19:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0fef959d-128a-430d-abba-4db73336bb1e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T15:19:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0fef959d-128a-430d-abba-4db73336bb1e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T15:19:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0fef959d-128a-430d-abba-4db73336bb1e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-bb95eb/ipp-route-bb95eb\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-bb95eb/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T15:19:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0fef959d-128a-430d-abba-4db73336bb1e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T15:19:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0fef959d-128a-430d-abba-4db73336bb1e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T15:19:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0fef959d-128a-430d-abba-4db73336bb1e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-24T15:19:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0fef959d-128a-430d-abba-4db73336bb1e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T15:19:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0fef959d-128a-430d-abba-4db73336bb1e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T15:19:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e9dad600-58ad-4e7d-9d13-674c4d0afa96","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:52486","PortSpecifier":{"PortValue":52486}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e9dad600-58ad-4e7d-9d13-674c4d0afa96","method":"POST","path":"/ai-tenant-e2e-ipp-a-bb95eb/ipp-route-bb95eb/v1/chat/completions","host":"e2e-ipp-a-bb95eb.apps.3be3295e-9019-4b6b-9df8-99ce19d48613.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T15:19:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e9dad600-58ad-4e7d-9d13-674c4d0afa96","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:52486","PortSpecifier":{"PortValue":52486}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784906352,"nanos":115239093},"http":{"id":"e9dad600-58ad-4e7d-9d13-674c4d0afa96","method":"POST","headers":{":authority":"e2e-ipp-a-bb95eb.apps.3be3295e-9019-4b6b-9df8-99ce19d48613.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-ipp-a-bb95eb/ipp-route-bb95eb/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T15:19:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e9dad600-58ad-4e7d-9d13-674c4d0afa96","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-BQE5ljAdVtxzO1pa_Nplhj4tN4MyCMlAbxHi9zXKZV5kwGnCED1CTiWIc9dU"} {"level":"debug","ts":"2026-07-24T15:19:12Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e9dad600-58ad-4e7d-9d13-674c4d0afa96","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-ipp-a-bb95eb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-BQE5ljAdVtxzO1pa_Nplhj4tN4MyCMlAbxHi9zXKZV5kwGnCED1CTiWIc9dU\"}"} {"level":"debug","ts":"2026-07-24T15:19:12Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e9dad600-58ad-4e7d-9d13-674c4d0afa96","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-bb95eb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"df967d42-c6ac-4ebc-aefa-f9130e8efeae","keyName":"e2e-ipp-bb95eb","subscription":"ipp-route-bb95eb-sub","tenant":"e2e-ipp-a-bb95eb","userId":"df967d42-c6ac-4ebc-aefa-f9130e8efeae","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T15:19:12Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e9dad600-58ad-4e7d-9d13-674c4d0afa96","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-ipp-a-bb95eb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-ipp-a-bb95eb/ipp-route-bb95eb\",\"requestedSubscription\":\"ipp-route-bb95eb-sub\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-24T15:19:12Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e9dad600-58ad-4e7d-9d13-674c4d0afa96","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-bb95eb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"ipp-route-bb95eb","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-bb95eb-sub","namespace":"ai-tenant-e2e-ipp-a-bb95eb","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-bb95eb/ipp-route-bb95eb"}} {"level":"debug","ts":"2026-07-24T15:19:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e9dad600-58ad-4e7d-9d13-674c4d0afa96","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T15:19:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e9dad600-58ad-4e7d-9d13-674c4d0afa96","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T15:19:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e9dad600-58ad-4e7d-9d13-674c4d0afa96","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T15:19:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e9dad600-58ad-4e7d-9d13-674c4d0afa96","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-bb95eb/ipp-route-bb95eb\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-bb95eb/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T15:19:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e9dad600-58ad-4e7d-9d13-674c4d0afa96","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T15:19:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e9dad600-58ad-4e7d-9d13-674c4d0afa96","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"ipp-route-bb95eb-sub"} {"level":"debug","ts":"2026-07-24T15:19:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e9dad600-58ad-4e7d-9d13-674c4d0afa96","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T15:19:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e9dad600-58ad-4e7d-9d13-674c4d0afa96","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T15:19:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e9dad600-58ad-4e7d-9d13-674c4d0afa96","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"df967d42-c6ac-4ebc-aefa-f9130e8efeae","keyName":"e2e-ipp-bb95eb","selected_subscription":"ipp-route-bb95eb-sub","selected_subscription_key":"ai-tenant-e2e-ipp-a-bb95eb/ipp-route-bb95eb-sub@ai-tenant-e2e-ipp-a-bb95eb/ipp-route-bb95eb","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"ipp-route-bb95eb","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-bb95eb-sub","namespace":"ai-tenant-e2e-ipp-a-bb95eb","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-bb95eb/ipp-route-bb95eb"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-24T15:19:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e9dad600-58ad-4e7d-9d13-674c4d0afa96","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T15:19:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e9dad600-58ad-4e7d-9d13-674c4d0afa96","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/81bc37a79a68e46ff44badcff8e29e2c043e443d5dcb782d4a5c105a07bbc411"} {"level":"info","ts":"2026-07-24T15:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a2eb6c5d0d22cecc8e6640d6daf679d2749f52b2202e69db5974f9a345c48c90"} {"level":"info","ts":"2026-07-24T15:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/593137e58501e12ecead0e127e24a6c3bd36eb28c3b838cdd157ad6efadf78a5"} {"level":"info","ts":"2026-07-24T15:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5601aeba088665f255601bd8ae7ced03b1a175dd3e26df5fcf62e76347ff63cd"} {"level":"info","ts":"2026-07-24T15:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4807da606c52ec8945542ca44137dbdc531cbbc3f88c23c972f9d4039117465d"} {"level":"info","ts":"2026-07-24T15:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3e538ca06733156df01581941c70d0f3251a01bc5175c1a04d355e16e1c44598"} {"level":"info","ts":"2026-07-24T15:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b55f06f80108444f54123126e1c0b19a2ee1520e04c02130e2587459e38f006b"} {"level":"info","ts":"2026-07-24T15:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/64f15c48bc8efe4b9e42d4febf29df3807c55823bc62f4d2d49c448ed7e0f0a3"} {"level":"info","ts":"2026-07-24T15:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/310fbed840060d2ffaddfd10efc4726913f7690489d4eb832ff447723823784e"} {"level":"info","ts":"2026-07-24T15:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0cd3d260cf4fe944debc85693dc1124fca18fadcc0b6d0aa5bcc0e5eebb9a29f"} {"level":"info","ts":"2026-07-24T15:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e7c617a1eea000acc8ec9e59ebe21c9c1c497ee2a5ae8acf11c294f0119817ae"} {"level":"info","ts":"2026-07-24T15:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4e6341ca90d08ee83ae7ae7e4793473187e4f0b0d9917fe9ebeae961b5c0399b"}