--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) --- {"level":"debug","ts":"2026-07-18T17:21:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7c6e52202169abfb9c66eea59436b89614718350af3843b89896249e0fb1edf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:21:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:21:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f7c6e52202169abfb9c66eea59436b89614718350af3843b89896249e0fb1edf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:21:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18136a7ea3224fd4fe8d635f843eeb7edcb7aef1c349914ac7d6844a9ff43eff"} {"level":"info","ts":"2026-07-18T17:21:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7c6e52202169abfb9c66eea59436b89614718350af3843b89896249e0fb1edf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:21:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eeec35435dae4d11ef4448e7497f2507b94c577c6d026a60914fe8dd7dfc631a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:21:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"057aca8234e4025b2d0d4da0c79c1b55ae32e285c821a2b6e2019f80b79e3281","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:21:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:21:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["057aca8234e4025b2d0d4da0c79c1b55ae32e285c821a2b6e2019f80b79e3281"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:21:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"057aca8234e4025b2d0d4da0c79c1b55ae32e285c821a2b6e2019f80b79e3281","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:21:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e96002ddfed2da222a5701361fccf65fdcad3bbb3ece51e10c27afabc7c8cdbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:21:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18136a7ea3224fd4fe8d635f843eeb7edcb7aef1c349914ac7d6844a9ff43eff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:21:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7c6e52202169abfb9c66eea59436b89614718350af3843b89896249e0fb1edf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:21:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:21:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:21:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7c6e52202169abfb9c66eea59436b89614718350af3843b89896249e0fb1edf"} {"level":"info","ts":"2026-07-18T17:21:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/057aca8234e4025b2d0d4da0c79c1b55ae32e285c821a2b6e2019f80b79e3281"} {"level":"info","ts":"2026-07-18T17:21:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7c6e52202169abfb9c66eea59436b89614718350af3843b89896249e0fb1edf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:21:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"057aca8234e4025b2d0d4da0c79c1b55ae32e285c821a2b6e2019f80b79e3281","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:21:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7c6e52202169abfb9c66eea59436b89614718350af3843b89896249e0fb1edf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:21:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7c6e52202169abfb9c66eea59436b89614718350af3843b89896249e0fb1edf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T17:21:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7c6e52202169abfb9c66eea59436b89614718350af3843b89896249e0fb1edf"} {"level":"debug","ts":"2026-07-18T17:21:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7c6e52202169abfb9c66eea59436b89614718350af3843b89896249e0fb1edf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:21:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:21:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f7c6e52202169abfb9c66eea59436b89614718350af3843b89896249e0fb1edf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:21:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7c6e52202169abfb9c66eea59436b89614718350af3843b89896249e0fb1edf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:21:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7c6e52202169abfb9c66eea59436b89614718350af3843b89896249e0fb1edf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:21:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:21:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:21:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7c6e52202169abfb9c66eea59436b89614718350af3843b89896249e0fb1edf"} {"level":"info","ts":"2026-07-18T17:21:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7c6e52202169abfb9c66eea59436b89614718350af3843b89896249e0fb1edf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:21:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7c6e52202169abfb9c66eea59436b89614718350af3843b89896249e0fb1edf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:21:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7c6e52202169abfb9c66eea59436b89614718350af3843b89896249e0fb1edf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T17:21:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7c6e52202169abfb9c66eea59436b89614718350af3843b89896249e0fb1edf"} {"level":"debug","ts":"2026-07-18T17:21:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7c6e52202169abfb9c66eea59436b89614718350af3843b89896249e0fb1edf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:21:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:21:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f7c6e52202169abfb9c66eea59436b89614718350af3843b89896249e0fb1edf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:21:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7c6e52202169abfb9c66eea59436b89614718350af3843b89896249e0fb1edf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:21:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7c6e52202169abfb9c66eea59436b89614718350af3843b89896249e0fb1edf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T17:21:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7c6e52202169abfb9c66eea59436b89614718350af3843b89896249e0fb1edf"} {"level":"info","ts":"2026-07-18T17:21:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"12a71ba1-d4e1-43f6-9957-2cc62449e753","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:60308","PortSpecifier":{"PortValue":60308}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"12a71ba1-d4e1-43f6-9957-2cc62449e753","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-78538d.apps.895c59d4-5776-4983-8d76-ee2580b4b8e8.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-18T17:21:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"12a71ba1-d4e1-43f6-9957-2cc62449e753","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:60308","PortSpecifier":{"PortValue":60308}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784395308,"nanos":275091785},"http":{"id":"12a71ba1-d4e1-43f6-9957-2cc62449e753","method":"POST","headers":{":authority":"e2e-shared-a-78538d.apps.895c59d4-5776-4983-8d76-ee2580b4b8e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T17:21:48Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"12a71ba1-d4e1-43f6-9957-2cc62449e753","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-18T17:21:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"12a71ba1-d4e1-43f6-9957-2cc62449e753","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f1b895b9-520b-4c73-9653-1fa79c8c3661","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6e438633-d12a-44b1-b014-279cffb6963d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ee2580b4b8e8"]}} {"level":"debug","ts":"2026-07-18T17:21:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"12a71ba1-d4e1-43f6-9957-2cc62449e753","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ee2580b4b8e8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6e438633-d12a-44b1-b014-279cffb6963d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f1b895b9-520b-4c73-9653-1fa79c8c3661","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"175e4cdc26d29960ce6d8bc2fba411fcbffab1591b5450037d0d5fa45b78d0bd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-78538d.apps.895c59d4-5776-4983-8d76-ee2580b4b8e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T17:21:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"12a71ba1-d4e1-43f6-9957-2cc62449e753","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T17:21:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"12a71ba1-d4e1-43f6-9957-2cc62449e753","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T17:21:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"12a71ba1-d4e1-43f6-9957-2cc62449e753","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-78538d/auth-test-model-78538d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-78538d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T17:21:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"12a71ba1-d4e1-43f6-9957-2cc62449e753","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-18T17:21:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"12a71ba1-d4e1-43f6-9957-2cc62449e753","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-18T17:21:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"12a71ba1-d4e1-43f6-9957-2cc62449e753","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-18T17:21:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"12a71ba1-d4e1-43f6-9957-2cc62449e753","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-18T17:21:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"12a71ba1-d4e1-43f6-9957-2cc62449e753","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-18T17:21:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"93b5222f-7593-4be6-b23e-4e7d2f04c574","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:51356","PortSpecifier":{"PortValue":51356}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"93b5222f-7593-4be6-b23e-4e7d2f04c574","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-497f21.apps.895c59d4-5776-4983-8d76-ee2580b4b8e8.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-18T17:21:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"93b5222f-7593-4be6-b23e-4e7d2f04c574","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:51356","PortSpecifier":{"PortValue":51356}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784395308,"nanos":332147404},"http":{"id":"93b5222f-7593-4be6-b23e-4e7d2f04c574","method":"POST","headers":{":authority":"e2e-shared-b-497f21.apps.895c59d4-5776-4983-8d76-ee2580b4b8e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T17:21:48Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"93b5222f-7593-4be6-b23e-4e7d2f04c574","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-18T17:21:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"93b5222f-7593-4be6-b23e-4e7d2f04c574","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f1b895b9-520b-4c73-9653-1fa79c8c3661","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6e438633-d12a-44b1-b014-279cffb6963d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ee2580b4b8e8"]}} {"level":"debug","ts":"2026-07-18T17:21:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"93b5222f-7593-4be6-b23e-4e7d2f04c574","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ee2580b4b8e8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6e438633-d12a-44b1-b014-279cffb6963d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f1b895b9-520b-4c73-9653-1fa79c8c3661","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-497f21.apps.895c59d4-5776-4983-8d76-ee2580b4b8e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T17:21:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"93b5222f-7593-4be6-b23e-4e7d2f04c574","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T17:21:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"93b5222f-7593-4be6-b23e-4e7d2f04c574","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T17:21:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"93b5222f-7593-4be6-b23e-4e7d2f04c574","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-497f21/auth-test-model-497f21\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-497f21/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T17:21:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"93b5222f-7593-4be6-b23e-4e7d2f04c574","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-18T17:21:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"93b5222f-7593-4be6-b23e-4e7d2f04c574","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-18T17:21:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"93b5222f-7593-4be6-b23e-4e7d2f04c574","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-18T17:21:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"93b5222f-7593-4be6-b23e-4e7d2f04c574","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-18T17:21:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"93b5222f-7593-4be6-b23e-4e7d2f04c574","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-18T17:21:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d812f4f3-fe43-45a0-8913-33179134eafe","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:51358","PortSpecifier":{"PortValue":51358}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d812f4f3-fe43-45a0-8913-33179134eafe","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-497f21.apps.895c59d4-5776-4983-8d76-ee2580b4b8e8.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-18T17:21:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d812f4f3-fe43-45a0-8913-33179134eafe","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:51358","PortSpecifier":{"PortValue":51358}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784395308,"nanos":364040159},"http":{"id":"d812f4f3-fe43-45a0-8913-33179134eafe","method":"GET","headers":{":authority":"e2e-shared-b-497f21.apps.895c59d4-5776-4983-8d76-ee2580b4b8e8.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T17:21:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d812f4f3-fe43-45a0-8913-33179134eafe","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-JeSDgVgQJEGvwev1_pU4EqM45Z83ITtFxjUsrnTxFttLx7TZKNCyvDUkc9AL"} {"level":"debug","ts":"2026-07-18T17:21:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d812f4f3-fe43-45a0-8913-33179134eafe","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-497f21.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-JeSDgVgQJEGvwev1_pU4EqM45Z83ITtFxjUsrnTxFttLx7TZKNCyvDUkc9AL\"}"} {"level":"debug","ts":"2026-07-18T17:21:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d812f4f3-fe43-45a0-8913-33179134eafe","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-497f21.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}} {"level":"debug","ts":"2026-07-18T17:21:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d812f4f3-fe43-45a0-8913-33179134eafe","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-497f21.apps.895c59d4-5776-4983-8d76-ee2580b4b8e8.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T17:21:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d812f4f3-fe43-45a0-8913-33179134eafe","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T17:21:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"d812f4f3-fe43-45a0-8913-33179134eafe","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"} {"level":"info","ts":"2026-07-18T17:21:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d812f4f3-fe43-45a0-8913-33179134eafe","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}} {"level":"debug","ts":"2026-07-18T17:21:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d812f4f3-fe43-45a0-8913-33179134eafe","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}} {"level":"info","ts":"2026-07-18T17:21:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2a9ab313b963f3421438923880d2651275d3e54c297413ae197bb30b0d155ea9"} {"level":"info","ts":"2026-07-18T17:21:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2d8a3bb09f0949758e20b65e6ac48288d66c431dfc0cd57891b4023665c63688"} {"level":"info","ts":"2026-07-18T17:21:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4"} {"level":"info","ts":"2026-07-18T17:21:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/84f7fbf20daa8e42cb82d0dbd9c713768e0e64b1c17da612ae1eb2c5742b84c3"} {"level":"info","ts":"2026-07-18T17:21:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/18136a7ea3224fd4fe8d635f843eeb7edcb7aef1c349914ac7d6844a9ff43eff"} {"level":"info","ts":"2026-07-18T17:21:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/04045d64cec25704816b986d84270d9cc09ed87c37b539039aede1bcb1cce748"} {"level":"info","ts":"2026-07-18T17:21:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7165f534f691afb40fe63819d7261caf74760aae46c101396be2bc783fc76301"} {"level":"info","ts":"2026-07-18T17:21:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e96002ddfed2da222a5701361fccf65fdcad3bbb3ece51e10c27afabc7c8cdbd"} {"level":"info","ts":"2026-07-18T17:21:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/057aca8234e4025b2d0d4da0c79c1b55ae32e285c821a2b6e2019f80b79e3281"} {"level":"info","ts":"2026-07-18T17:21:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f7c6e52202169abfb9c66eea59436b89614718350af3843b89896249e0fb1edf"} {"level":"info","ts":"2026-07-18T17:21:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0"} {"level":"info","ts":"2026-07-18T17:21:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eeec35435dae4d11ef4448e7497f2507b94c577c6d026a60914fe8dd7dfc631a"} {"level":"debug","ts":"2026-07-18T17:22:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:22:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:22:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T17:22:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0"} {"level":"debug","ts":"2026-07-18T17:22:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T17:22:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0"} {"level":"debug","ts":"2026-07-18T17:22:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:22:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:22:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:22:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:22:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T17:22:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0"} {"level":"debug","ts":"2026-07-18T17:22:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T17:22:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0"} {"level":"debug","ts":"2026-07-18T17:22:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:22:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:22:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:22:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:22:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04045d64cec25704816b986d84270d9cc09ed87c37b539039aede1bcb1cce748","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:22:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:22:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0"} {"level":"info","ts":"2026-07-18T17:22:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04045d64cec25704816b986d84270d9cc09ed87c37b539039aede1bcb1cce748","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:22:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:22:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04045d64cec25704816b986d84270d9cc09ed87c37b539039aede1bcb1cce748","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:22:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:22:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04045d64cec25704816b986d84270d9cc09ed87c37b539039aede1bcb1cce748"} {"level":"info","ts":"2026-07-18T17:22:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04045d64cec25704816b986d84270d9cc09ed87c37b539039aede1bcb1cce748","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:22:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:22:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0"} {"level":"info","ts":"2026-07-18T17:22:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04045d64cec25704816b986d84270d9cc09ed87c37b539039aede1bcb1cce748","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:22:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:22:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:22:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:22:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04045d64cec25704816b986d84270d9cc09ed87c37b539039aede1bcb1cce748"} {"level":"error","ts":"2026-07-18T17:22:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-18T17:22:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04045d64cec25704816b986d84270d9cc09ed87c37b539039aede1bcb1cce748","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:22:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:22:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["04045d64cec25704816b986d84270d9cc09ed87c37b539039aede1bcb1cce748"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04045d64cec25704816b986d84270d9cc09ed87c37b539039aede1bcb1cce748","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:22:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:22:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0"} {"level":"info","ts":"2026-07-18T17:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04045d64cec25704816b986d84270d9cc09ed87c37b539039aede1bcb1cce748","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:22:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:22:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04045d64cec25704816b986d84270d9cc09ed87c37b539039aede1bcb1cce748"} {"level":"info","ts":"2026-07-18T17:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04045d64cec25704816b986d84270d9cc09ed87c37b539039aede1bcb1cce748","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04045d64cec25704816b986d84270d9cc09ed87c37b539039aede1bcb1cce748","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:22:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:22:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["04045d64cec25704816b986d84270d9cc09ed87c37b539039aede1bcb1cce748"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04045d64cec25704816b986d84270d9cc09ed87c37b539039aede1bcb1cce748","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04045d64cec25704816b986d84270d9cc09ed87c37b539039aede1bcb1cce748","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:22:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:22:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["04045d64cec25704816b986d84270d9cc09ed87c37b539039aede1bcb1cce748"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0"} {"level":"error","ts":"2026-07-18T17:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"04045d64cec25704816b986d84270d9cc09ed87c37b539039aede1bcb1cce748","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"04045d64cec25704816b986d84270d9cc09ed87c37b539039aede1bcb1cce748\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-18T17:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:22:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:22:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04045d64cec25704816b986d84270d9cc09ed87c37b539039aede1bcb1cce748","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:22:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:22:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04045d64cec25704816b986d84270d9cc09ed87c37b539039aede1bcb1cce748"} {"level":"info","ts":"2026-07-18T17:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04045d64cec25704816b986d84270d9cc09ed87c37b539039aede1bcb1cce748","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:22:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:22:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04045d64cec25704816b986d84270d9cc09ed87c37b539039aede1bcb1cce748","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:22:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:22:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["04045d64cec25704816b986d84270d9cc09ed87c37b539039aede1bcb1cce748"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0"} {"level":"info","ts":"2026-07-18T17:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04045d64cec25704816b986d84270d9cc09ed87c37b539039aede1bcb1cce748","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:22:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:22:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04045d64cec25704816b986d84270d9cc09ed87c37b539039aede1bcb1cce748"} {"level":"info","ts":"2026-07-18T17:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a9ab313b963f3421438923880d2651275d3e54c297413ae197bb30b0d155ea9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:22:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:22:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a9ab313b963f3421438923880d2651275d3e54c297413ae197bb30b0d155ea9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04045d64cec25704816b986d84270d9cc09ed87c37b539039aede1bcb1cce748","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:22:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:22:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0"} {"level":"info","ts":"2026-07-18T17:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a9ab313b963f3421438923880d2651275d3e54c297413ae197bb30b0d155ea9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:22:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:22:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a9ab313b963f3421438923880d2651275d3e54c297413ae197bb30b0d155ea9"} {"level":"info","ts":"2026-07-18T17:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a9ab313b963f3421438923880d2651275d3e54c297413ae197bb30b0d155ea9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:22:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:22:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a9ab313b963f3421438923880d2651275d3e54c297413ae197bb30b0d155ea9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:22:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:22:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2a9ab313b963f3421438923880d2651275d3e54c297413ae197bb30b0d155ea9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04045d64cec25704816b986d84270d9cc09ed87c37b539039aede1bcb1cce748"} {"level":"info","ts":"2026-07-18T17:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a9ab313b963f3421438923880d2651275d3e54c297413ae197bb30b0d155ea9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:22:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:22:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a9ab313b963f3421438923880d2651275d3e54c297413ae197bb30b0d155ea9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T17:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0"} {"level":"debug","ts":"2026-07-18T17:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:22:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:22:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7165f534f691afb40fe63819d7261caf74760aae46c101396be2bc783fc76301","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:22:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:22:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a9ab313b963f3421438923880d2651275d3e54c297413ae197bb30b0d155ea9"} {"level":"info","ts":"2026-07-18T17:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7165f534f691afb40fe63819d7261caf74760aae46c101396be2bc783fc76301","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:22:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:22:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0"} {"level":"info","ts":"2026-07-18T17:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7165f534f691afb40fe63819d7261caf74760aae46c101396be2bc783fc76301","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:22:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:22:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7165f534f691afb40fe63819d7261caf74760aae46c101396be2bc783fc76301","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:22:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:22:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7165f534f691afb40fe63819d7261caf74760aae46c101396be2bc783fc76301"} {"level":"info","ts":"2026-07-18T17:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7165f534f691afb40fe63819d7261caf74760aae46c101396be2bc783fc76301","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:22:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:22:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7165f534f691afb40fe63819d7261caf74760aae46c101396be2bc783fc76301"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0"} {"level":"info","ts":"2026-07-18T17:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7165f534f691afb40fe63819d7261caf74760aae46c101396be2bc783fc76301","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7165f534f691afb40fe63819d7261caf74760aae46c101396be2bc783fc76301","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:22:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:22:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7165f534f691afb40fe63819d7261caf74760aae46c101396be2bc783fc76301","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7165f534f691afb40fe63819d7261caf74760aae46c101396be2bc783fc76301","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T17:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7165f534f691afb40fe63819d7261caf74760aae46c101396be2bc783fc76301"} {"level":"debug","ts":"2026-07-18T17:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7165f534f691afb40fe63819d7261caf74760aae46c101396be2bc783fc76301","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:22:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:22:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7165f534f691afb40fe63819d7261caf74760aae46c101396be2bc783fc76301"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7165f534f691afb40fe63819d7261caf74760aae46c101396be2bc783fc76301","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7165f534f691afb40fe63819d7261caf74760aae46c101396be2bc783fc76301","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T17:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0"} {"level":"info","ts":"2026-07-18T17:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7165f534f691afb40fe63819d7261caf74760aae46c101396be2bc783fc76301"} {"level":"debug","ts":"2026-07-18T17:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18136a7ea3224fd4fe8d635f843eeb7edcb7aef1c349914ac7d6844a9ff43eff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:22:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:22:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18136a7ea3224fd4fe8d635f843eeb7edcb7aef1c349914ac7d6844a9ff43eff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:22:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:22:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18136a7ea3224fd4fe8d635f843eeb7edcb7aef1c349914ac7d6844a9ff43eff"} {"level":"info","ts":"2026-07-18T17:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18136a7ea3224fd4fe8d635f843eeb7edcb7aef1c349914ac7d6844a9ff43eff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:22:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:22:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18136a7ea3224fd4fe8d635f843eeb7edcb7aef1c349914ac7d6844a9ff43eff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4"} {"level":"info","ts":"2026-07-18T17:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18136a7ea3224fd4fe8d635f843eeb7edcb7aef1c349914ac7d6844a9ff43eff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:22:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:22:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18136a7ea3224fd4fe8d635f843eeb7edcb7aef1c349914ac7d6844a9ff43eff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:22:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:22:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18136a7ea3224fd4fe8d635f843eeb7edcb7aef1c349914ac7d6844a9ff43eff"} {"level":"info","ts":"2026-07-18T17:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18136a7ea3224fd4fe8d635f843eeb7edcb7aef1c349914ac7d6844a9ff43eff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:22:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:22:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4"} {"level":"info","ts":"2026-07-18T17:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18136a7ea3224fd4fe8d635f843eeb7edcb7aef1c349914ac7d6844a9ff43eff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:22:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:22:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18136a7ea3224fd4fe8d635f843eeb7edcb7aef1c349914ac7d6844a9ff43eff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:22:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:22:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-18T17:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-18T17:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"057aca8234e4025b2d0d4da0c79c1b55ae32e285c821a2b6e2019f80b79e3281","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:22:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:22:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18136a7ea3224fd4fe8d635f843eeb7edcb7aef1c349914ac7d6844a9ff43eff"} {"level":"info","ts":"2026-07-18T17:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"057aca8234e4025b2d0d4da0c79c1b55ae32e285c821a2b6e2019f80b79e3281","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:22:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:22:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7c6e52202169abfb9c66eea59436b89614718350af3843b89896249e0fb1edf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:22:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:22:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4"} {"level":"info","ts":"2026-07-18T17:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7c6e52202169abfb9c66eea59436b89614718350af3843b89896249e0fb1edf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18136a7ea3224fd4fe8d635f843eeb7edcb7aef1c349914ac7d6844a9ff43eff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:22:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:22:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18136a7ea3224fd4fe8d635f843eeb7edcb7aef1c349914ac7d6844a9ff43eff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/057aca8234e4025b2d0d4da0c79c1b55ae32e285c821a2b6e2019f80b79e3281"} {"level":"info","ts":"2026-07-18T17:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7c6e52202169abfb9c66eea59436b89614718350af3843b89896249e0fb1edf"} {"level":"info","ts":"2026-07-18T17:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18136a7ea3224fd4fe8d635f843eeb7edcb7aef1c349914ac7d6844a9ff43eff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"057aca8234e4025b2d0d4da0c79c1b55ae32e285c821a2b6e2019f80b79e3281","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:22:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:22:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["057aca8234e4025b2d0d4da0c79c1b55ae32e285c821a2b6e2019f80b79e3281"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eeec35435dae4d11ef4448e7497f2507b94c577c6d026a60914fe8dd7dfc631a"} {"level":"info","ts":"2026-07-18T17:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4"} {"level":"info","ts":"2026-07-18T17:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"057aca8234e4025b2d0d4da0c79c1b55ae32e285c821a2b6e2019f80b79e3281","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eeec35435dae4d11ef4448e7497f2507b94c577c6d026a60914fe8dd7dfc631a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:22:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:22:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eeec35435dae4d11ef4448e7497f2507b94c577c6d026a60914fe8dd7dfc631a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18136a7ea3224fd4fe8d635f843eeb7edcb7aef1c349914ac7d6844a9ff43eff"} {"level":"info","ts":"2026-07-18T17:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eeec35435dae4d11ef4448e7497f2507b94c577c6d026a60914fe8dd7dfc631a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:22:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:22:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84f7fbf20daa8e42cb82d0dbd9c713768e0e64b1c17da612ae1eb2c5742b84c3"} {"level":"info","ts":"2026-07-18T17:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7c6e52202169abfb9c66eea59436b89614718350af3843b89896249e0fb1edf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:22:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:22:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f7c6e52202169abfb9c66eea59436b89614718350af3843b89896249e0fb1edf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d8a3bb09f0949758e20b65e6ac48288d66c431dfc0cd57891b4023665c63688"} {"level":"info","ts":"2026-07-18T17:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e96002ddfed2da222a5701361fccf65fdcad3bbb3ece51e10c27afabc7c8cdbd"} {"level":"info","ts":"2026-07-18T17:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/057aca8234e4025b2d0d4da0c79c1b55ae32e285c821a2b6e2019f80b79e3281"} {"level":"info","ts":"2026-07-18T17:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7c6e52202169abfb9c66eea59436b89614718350af3843b89896249e0fb1edf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18136a7ea3224fd4fe8d635f843eeb7edcb7aef1c349914ac7d6844a9ff43eff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84f7fbf20daa8e42cb82d0dbd9c713768e0e64b1c17da612ae1eb2c5742b84c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:22:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:22:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["84f7fbf20daa8e42cb82d0dbd9c713768e0e64b1c17da612ae1eb2c5742b84c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eeec35435dae4d11ef4448e7497f2507b94c577c6d026a60914fe8dd7dfc631a"} {"level":"info","ts":"2026-07-18T17:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4"} {"level":"info","ts":"2026-07-18T17:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84f7fbf20daa8e42cb82d0dbd9c713768e0e64b1c17da612ae1eb2c5742b84c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d8a3bb09f0949758e20b65e6ac48288d66c431dfc0cd57891b4023665c63688","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:22:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:22:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2d8a3bb09f0949758e20b65e6ac48288d66c431dfc0cd57891b4023665c63688"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7c6e52202169abfb9c66eea59436b89614718350af3843b89896249e0fb1edf"} {"level":"info","ts":"2026-07-18T17:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84f7fbf20daa8e42cb82d0dbd9c713768e0e64b1c17da612ae1eb2c5742b84c3"} {"level":"info","ts":"2026-07-18T17:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d8a3bb09f0949758e20b65e6ac48288d66c431dfc0cd57891b4023665c63688","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e96002ddfed2da222a5701361fccf65fdcad3bbb3ece51e10c27afabc7c8cdbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:22:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:22:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e96002ddfed2da222a5701361fccf65fdcad3bbb3ece51e10c27afabc7c8cdbd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d8a3bb09f0949758e20b65e6ac48288d66c431dfc0cd57891b4023665c63688"} {"level":"info","ts":"2026-07-18T17:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e96002ddfed2da222a5701361fccf65fdcad3bbb3ece51e10c27afabc7c8cdbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"057aca8234e4025b2d0d4da0c79c1b55ae32e285c821a2b6e2019f80b79e3281","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eeec35435dae4d11ef4448e7497f2507b94c577c6d026a60914fe8dd7dfc631a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7c6e52202169abfb9c66eea59436b89614718350af3843b89896249e0fb1edf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84f7fbf20daa8e42cb82d0dbd9c713768e0e64b1c17da612ae1eb2c5742b84c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d8a3bb09f0949758e20b65e6ac48288d66c431dfc0cd57891b4023665c63688","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e96002ddfed2da222a5701361fccf65fdcad3bbb3ece51e10c27afabc7c8cdbd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T17:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e96002ddfed2da222a5701361fccf65fdcad3bbb3ece51e10c27afabc7c8cdbd"} {"level":"info","ts":"2026-07-18T17:22:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1bfb437c-6a84-4edd-bbc1-982c3ed0f038","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:37636","PortSpecifier":{"PortValue":37636}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1bfb437c-6a84-4edd-bbc1-982c3ed0f038","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-78538d.apps.895c59d4-5776-4983-8d76-ee2580b4b8e8.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-18T17:22:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1bfb437c-6a84-4edd-bbc1-982c3ed0f038","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:37636","PortSpecifier":{"PortValue":37636}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784395325,"nanos":371789029},"http":{"id":"1bfb437c-6a84-4edd-bbc1-982c3ed0f038","method":"POST","headers":{":authority":"e2e-shared-a-78538d.apps.895c59d4-5776-4983-8d76-ee2580b4b8e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T17:22:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1bfb437c-6a84-4edd-bbc1-982c3ed0f038","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-18T17:22:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1bfb437c-6a84-4edd-bbc1-982c3ed0f038","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f1b895b9-520b-4c73-9653-1fa79c8c3661","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6e438633-d12a-44b1-b014-279cffb6963d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ee2580b4b8e8"]}} {"level":"debug","ts":"2026-07-18T17:22:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1bfb437c-6a84-4edd-bbc1-982c3ed0f038","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ee2580b4b8e8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6e438633-d12a-44b1-b014-279cffb6963d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f1b895b9-520b-4c73-9653-1fa79c8c3661","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"175e4cdc26d29960ce6d8bc2fba411fcbffab1591b5450037d0d5fa45b78d0bd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-78538d.apps.895c59d4-5776-4983-8d76-ee2580b4b8e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T17:22:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1bfb437c-6a84-4edd-bbc1-982c3ed0f038","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T17:22:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1bfb437c-6a84-4edd-bbc1-982c3ed0f038","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T17:22:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1bfb437c-6a84-4edd-bbc1-982c3ed0f038","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-78538d/auth-test-model-78538d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-78538d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T17:22:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1bfb437c-6a84-4edd-bbc1-982c3ed0f038","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-18T17:22:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1bfb437c-6a84-4edd-bbc1-982c3ed0f038","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-18T17:22:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1bfb437c-6a84-4edd-bbc1-982c3ed0f038","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-18T17:22:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1bfb437c-6a84-4edd-bbc1-982c3ed0f038","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-18T17:22:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1bfb437c-6a84-4edd-bbc1-982c3ed0f038","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-18T17:22:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f05fd136-1f4c-4485-bd16-41249ae03ff4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:48768","PortSpecifier":{"PortValue":48768}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f05fd136-1f4c-4485-bd16-41249ae03ff4","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-497f21.apps.895c59d4-5776-4983-8d76-ee2580b4b8e8.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-18T17:22:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f05fd136-1f4c-4485-bd16-41249ae03ff4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:48768","PortSpecifier":{"PortValue":48768}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784395325,"nanos":416309642},"http":{"id":"f05fd136-1f4c-4485-bd16-41249ae03ff4","method":"POST","headers":{":authority":"e2e-shared-b-497f21.apps.895c59d4-5776-4983-8d76-ee2580b4b8e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T17:22:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f05fd136-1f4c-4485-bd16-41249ae03ff4","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-18T17:22:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f05fd136-1f4c-4485-bd16-41249ae03ff4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f1b895b9-520b-4c73-9653-1fa79c8c3661","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6e438633-d12a-44b1-b014-279cffb6963d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ee2580b4b8e8"]}} {"level":"debug","ts":"2026-07-18T17:22:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f05fd136-1f4c-4485-bd16-41249ae03ff4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ee2580b4b8e8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6e438633-d12a-44b1-b014-279cffb6963d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f1b895b9-520b-4c73-9653-1fa79c8c3661","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-497f21.apps.895c59d4-5776-4983-8d76-ee2580b4b8e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T17:22:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f05fd136-1f4c-4485-bd16-41249ae03ff4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T17:22:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f05fd136-1f4c-4485-bd16-41249ae03ff4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T17:22:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f05fd136-1f4c-4485-bd16-41249ae03ff4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-497f21/auth-test-model-497f21\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-497f21/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T17:22:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f05fd136-1f4c-4485-bd16-41249ae03ff4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-18T17:22:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f05fd136-1f4c-4485-bd16-41249ae03ff4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-18T17:22:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f05fd136-1f4c-4485-bd16-41249ae03ff4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-18T17:22:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f05fd136-1f4c-4485-bd16-41249ae03ff4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-18T17:22:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f05fd136-1f4c-4485-bd16-41249ae03ff4","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-18T17:22:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d34c8ad0-6429-46da-8bee-56d3f2c0fb3c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:37638","PortSpecifier":{"PortValue":37638}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d34c8ad0-6429-46da-8bee-56d3f2c0fb3c","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-78538d.apps.895c59d4-5776-4983-8d76-ee2580b4b8e8.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-18T17:22:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d34c8ad0-6429-46da-8bee-56d3f2c0fb3c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:37638","PortSpecifier":{"PortValue":37638}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784395325,"nanos":449703790},"http":{"id":"d34c8ad0-6429-46da-8bee-56d3f2c0fb3c","method":"POST","headers":{":authority":"e2e-shared-a-78538d.apps.895c59d4-5776-4983-8d76-ee2580b4b8e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T17:22:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d34c8ad0-6429-46da-8bee-56d3f2c0fb3c","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-18T17:22:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d34c8ad0-6429-46da-8bee-56d3f2c0fb3c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f1b895b9-520b-4c73-9653-1fa79c8c3661","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6e438633-d12a-44b1-b014-279cffb6963d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ee2580b4b8e8"]}} {"level":"debug","ts":"2026-07-18T17:22:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d34c8ad0-6429-46da-8bee-56d3f2c0fb3c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ee2580b4b8e8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6e438633-d12a-44b1-b014-279cffb6963d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f1b895b9-520b-4c73-9653-1fa79c8c3661","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"175e4cdc26d29960ce6d8bc2fba411fcbffab1591b5450037d0d5fa45b78d0bd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-78538d.apps.895c59d4-5776-4983-8d76-ee2580b4b8e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T17:22:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d34c8ad0-6429-46da-8bee-56d3f2c0fb3c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T17:22:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d34c8ad0-6429-46da-8bee-56d3f2c0fb3c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T17:22:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d34c8ad0-6429-46da-8bee-56d3f2c0fb3c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-78538d/auth-test-model-78538d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-78538d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T17:22:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d34c8ad0-6429-46da-8bee-56d3f2c0fb3c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-18T17:22:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d34c8ad0-6429-46da-8bee-56d3f2c0fb3c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-18T17:22:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d34c8ad0-6429-46da-8bee-56d3f2c0fb3c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-18T17:22:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d34c8ad0-6429-46da-8bee-56d3f2c0fb3c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-18T17:22:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d34c8ad0-6429-46da-8bee-56d3f2c0fb3c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-18T17:22:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9950b926-3379-4cc2-b141-958a1b0bfa04","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:48770","PortSpecifier":{"PortValue":48770}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9950b926-3379-4cc2-b141-958a1b0bfa04","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-497f21.apps.895c59d4-5776-4983-8d76-ee2580b4b8e8.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-18T17:22:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9950b926-3379-4cc2-b141-958a1b0bfa04","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:48770","PortSpecifier":{"PortValue":48770}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784395325,"nanos":480966411},"http":{"id":"9950b926-3379-4cc2-b141-958a1b0bfa04","method":"POST","headers":{":authority":"e2e-shared-b-497f21.apps.895c59d4-5776-4983-8d76-ee2580b4b8e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T17:22:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9950b926-3379-4cc2-b141-958a1b0bfa04","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-18T17:22:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9950b926-3379-4cc2-b141-958a1b0bfa04","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f1b895b9-520b-4c73-9653-1fa79c8c3661","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6e438633-d12a-44b1-b014-279cffb6963d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ee2580b4b8e8"]}} {"level":"debug","ts":"2026-07-18T17:22:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9950b926-3379-4cc2-b141-958a1b0bfa04","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ee2580b4b8e8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6e438633-d12a-44b1-b014-279cffb6963d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f1b895b9-520b-4c73-9653-1fa79c8c3661","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-497f21.apps.895c59d4-5776-4983-8d76-ee2580b4b8e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T17:22:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9950b926-3379-4cc2-b141-958a1b0bfa04","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T17:22:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9950b926-3379-4cc2-b141-958a1b0bfa04","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T17:22:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9950b926-3379-4cc2-b141-958a1b0bfa04","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-497f21/auth-test-model-497f21\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-497f21/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T17:22:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9950b926-3379-4cc2-b141-958a1b0bfa04","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-18T17:22:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9950b926-3379-4cc2-b141-958a1b0bfa04","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-18T17:22:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9950b926-3379-4cc2-b141-958a1b0bfa04","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-18T17:22:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9950b926-3379-4cc2-b141-958a1b0bfa04","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-18T17:22:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9950b926-3379-4cc2-b141-958a1b0bfa04","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-18T17:22:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eeec35435dae4d11ef4448e7497f2507b94c577c6d026a60914fe8dd7dfc631a"} {"level":"info","ts":"2026-07-18T17:22:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/057aca8234e4025b2d0d4da0c79c1b55ae32e285c821a2b6e2019f80b79e3281"} {"level":"info","ts":"2026-07-18T17:22:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/18136a7ea3224fd4fe8d635f843eeb7edcb7aef1c349914ac7d6844a9ff43eff"} {"level":"info","ts":"2026-07-18T17:22:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2d8a3bb09f0949758e20b65e6ac48288d66c431dfc0cd57891b4023665c63688"} {"level":"info","ts":"2026-07-18T17:22:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/84f7fbf20daa8e42cb82d0dbd9c713768e0e64b1c17da612ae1eb2c5742b84c3"} {"level":"info","ts":"2026-07-18T17:22:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4"} {"level":"info","ts":"2026-07-18T17:22:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f7c6e52202169abfb9c66eea59436b89614718350af3843b89896249e0fb1edf"} {"level":"info","ts":"2026-07-18T17:22:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7165f534f691afb40fe63819d7261caf74760aae46c101396be2bc783fc76301"} {"level":"info","ts":"2026-07-18T17:22:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2a9ab313b963f3421438923880d2651275d3e54c297413ae197bb30b0d155ea9"} {"level":"info","ts":"2026-07-18T17:22:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/04045d64cec25704816b986d84270d9cc09ed87c37b539039aede1bcb1cce748"} {"level":"info","ts":"2026-07-18T17:22:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0"} {"level":"info","ts":"2026-07-18T17:22:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e96002ddfed2da222a5701361fccf65fdcad3bbb3ece51e10c27afabc7c8cdbd"} {"level":"debug","ts":"2026-07-18T17:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eeec35435dae4d11ef4448e7497f2507b94c577c6d026a60914fe8dd7dfc631a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:22:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:22:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eeec35435dae4d11ef4448e7497f2507b94c577c6d026a60914fe8dd7dfc631a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eeec35435dae4d11ef4448e7497f2507b94c577c6d026a60914fe8dd7dfc631a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eeec35435dae4d11ef4448e7497f2507b94c577c6d026a60914fe8dd7dfc631a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T17:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eeec35435dae4d11ef4448e7497f2507b94c577c6d026a60914fe8dd7dfc631a"} {"level":"debug","ts":"2026-07-18T17:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eeec35435dae4d11ef4448e7497f2507b94c577c6d026a60914fe8dd7dfc631a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T17:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eeec35435dae4d11ef4448e7497f2507b94c577c6d026a60914fe8dd7dfc631a"} {"level":"debug","ts":"2026-07-18T17:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eeec35435dae4d11ef4448e7497f2507b94c577c6d026a60914fe8dd7dfc631a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:22:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:22:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eeec35435dae4d11ef4448e7497f2507b94c577c6d026a60914fe8dd7dfc631a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eeec35435dae4d11ef4448e7497f2507b94c577c6d026a60914fe8dd7dfc631a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eeec35435dae4d11ef4448e7497f2507b94c577c6d026a60914fe8dd7dfc631a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:22:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:22:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eeec35435dae4d11ef4448e7497f2507b94c577c6d026a60914fe8dd7dfc631a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eeec35435dae4d11ef4448e7497f2507b94c577c6d026a60914fe8dd7dfc631a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eeec35435dae4d11ef4448e7497f2507b94c577c6d026a60914fe8dd7dfc631a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T17:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eeec35435dae4d11ef4448e7497f2507b94c577c6d026a60914fe8dd7dfc631a"} {"level":"debug","ts":"2026-07-18T17:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eeec35435dae4d11ef4448e7497f2507b94c577c6d026a60914fe8dd7dfc631a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T17:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eeec35435dae4d11ef4448e7497f2507b94c577c6d026a60914fe8dd7dfc631a"} {"level":"debug","ts":"2026-07-18T17:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eeec35435dae4d11ef4448e7497f2507b94c577c6d026a60914fe8dd7dfc631a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:22:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:22:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eeec35435dae4d11ef4448e7497f2507b94c577c6d026a60914fe8dd7dfc631a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eeec35435dae4d11ef4448e7497f2507b94c577c6d026a60914fe8dd7dfc631a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eeec35435dae4d11ef4448e7497f2507b94c577c6d026a60914fe8dd7dfc631a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d8a3bb09f0949758e20b65e6ac48288d66c431dfc0cd57891b4023665c63688","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:22:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:22:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d8a3bb09f0949758e20b65e6ac48288d66c431dfc0cd57891b4023665c63688","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d8a3bb09f0949758e20b65e6ac48288d66c431dfc0cd57891b4023665c63688","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T17:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eeec35435dae4d11ef4448e7497f2507b94c577c6d026a60914fe8dd7dfc631a"} {"level":"debug","ts":"2026-07-18T17:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d8a3bb09f0949758e20b65e6ac48288d66c431dfc0cd57891b4023665c63688","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:22:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:22:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d8a3bb09f0949758e20b65e6ac48288d66c431dfc0cd57891b4023665c63688","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d8a3bb09f0949758e20b65e6ac48288d66c431dfc0cd57891b4023665c63688","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T17:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d8a3bb09f0949758e20b65e6ac48288d66c431dfc0cd57891b4023665c63688"} {"level":"debug","ts":"2026-07-18T17:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d8a3bb09f0949758e20b65e6ac48288d66c431dfc0cd57891b4023665c63688","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T17:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d8a3bb09f0949758e20b65e6ac48288d66c431dfc0cd57891b4023665c63688"} {"level":"debug","ts":"2026-07-18T17:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d8a3bb09f0949758e20b65e6ac48288d66c431dfc0cd57891b4023665c63688","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:22:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:22:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2d8a3bb09f0949758e20b65e6ac48288d66c431dfc0cd57891b4023665c63688"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d8a3bb09f0949758e20b65e6ac48288d66c431dfc0cd57891b4023665c63688","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d8a3bb09f0949758e20b65e6ac48288d66c431dfc0cd57891b4023665c63688","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:22:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:22:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d8a3bb09f0949758e20b65e6ac48288d66c431dfc0cd57891b4023665c63688","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d8a3bb09f0949758e20b65e6ac48288d66c431dfc0cd57891b4023665c63688","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d8a3bb09f0949758e20b65e6ac48288d66c431dfc0cd57891b4023665c63688","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T17:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d8a3bb09f0949758e20b65e6ac48288d66c431dfc0cd57891b4023665c63688"} {"level":"debug","ts":"2026-07-18T17:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d8a3bb09f0949758e20b65e6ac48288d66c431dfc0cd57891b4023665c63688","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T17:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d8a3bb09f0949758e20b65e6ac48288d66c431dfc0cd57891b4023665c63688"} {"level":"debug","ts":"2026-07-18T17:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d8a3bb09f0949758e20b65e6ac48288d66c431dfc0cd57891b4023665c63688","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:22:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:22:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2d8a3bb09f0949758e20b65e6ac48288d66c431dfc0cd57891b4023665c63688"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d8a3bb09f0949758e20b65e6ac48288d66c431dfc0cd57891b4023665c63688","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d8a3bb09f0949758e20b65e6ac48288d66c431dfc0cd57891b4023665c63688","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:22:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:22:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d8a3bb09f0949758e20b65e6ac48288d66c431dfc0cd57891b4023665c63688","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d8a3bb09f0949758e20b65e6ac48288d66c431dfc0cd57891b4023665c63688","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d8a3bb09f0949758e20b65e6ac48288d66c431dfc0cd57891b4023665c63688","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T17:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d8a3bb09f0949758e20b65e6ac48288d66c431dfc0cd57891b4023665c63688"} {"level":"debug","ts":"2026-07-18T17:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d8a3bb09f0949758e20b65e6ac48288d66c431dfc0cd57891b4023665c63688","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T17:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d8a3bb09f0949758e20b65e6ac48288d66c431dfc0cd57891b4023665c63688"} {"level":"debug","ts":"2026-07-18T17:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18136a7ea3224fd4fe8d635f843eeb7edcb7aef1c349914ac7d6844a9ff43eff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:22:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:22:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18136a7ea3224fd4fe8d635f843eeb7edcb7aef1c349914ac7d6844a9ff43eff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18136a7ea3224fd4fe8d635f843eeb7edcb7aef1c349914ac7d6844a9ff43eff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:22:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:22:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18136a7ea3224fd4fe8d635f843eeb7edcb7aef1c349914ac7d6844a9ff43eff"} {"level":"info","ts":"2026-07-18T17:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18136a7ea3224fd4fe8d635f843eeb7edcb7aef1c349914ac7d6844a9ff43eff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d8a3bb09f0949758e20b65e6ac48288d66c431dfc0cd57891b4023665c63688","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:22:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:22:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2d8a3bb09f0949758e20b65e6ac48288d66c431dfc0cd57891b4023665c63688"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d8a3bb09f0949758e20b65e6ac48288d66c431dfc0cd57891b4023665c63688","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18136a7ea3224fd4fe8d635f843eeb7edcb7aef1c349914ac7d6844a9ff43eff","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T17:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18136a7ea3224fd4fe8d635f843eeb7edcb7aef1c349914ac7d6844a9ff43eff"} {"level":"debug","ts":"2026-07-18T17:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d8a3bb09f0949758e20b65e6ac48288d66c431dfc0cd57891b4023665c63688","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18136a7ea3224fd4fe8d635f843eeb7edcb7aef1c349914ac7d6844a9ff43eff","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T17:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18136a7ea3224fd4fe8d635f843eeb7edcb7aef1c349914ac7d6844a9ff43eff"} {"level":"info","ts":"2026-07-18T17:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d8a3bb09f0949758e20b65e6ac48288d66c431dfc0cd57891b4023665c63688"} {"level":"debug","ts":"2026-07-18T17:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18136a7ea3224fd4fe8d635f843eeb7edcb7aef1c349914ac7d6844a9ff43eff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:22:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:22:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18136a7ea3224fd4fe8d635f843eeb7edcb7aef1c349914ac7d6844a9ff43eff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18136a7ea3224fd4fe8d635f843eeb7edcb7aef1c349914ac7d6844a9ff43eff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18136a7ea3224fd4fe8d635f843eeb7edcb7aef1c349914ac7d6844a9ff43eff","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T17:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18136a7ea3224fd4fe8d635f843eeb7edcb7aef1c349914ac7d6844a9ff43eff"} {"level":"debug","ts":"2026-07-18T17:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04045d64cec25704816b986d84270d9cc09ed87c37b539039aede1bcb1cce748","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:22:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:22:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04045d64cec25704816b986d84270d9cc09ed87c37b539039aede1bcb1cce748"} {"level":"info","ts":"2026-07-18T17:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04045d64cec25704816b986d84270d9cc09ed87c37b539039aede1bcb1cce748","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04045d64cec25704816b986d84270d9cc09ed87c37b539039aede1bcb1cce748","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:22:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:22:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04045d64cec25704816b986d84270d9cc09ed87c37b539039aede1bcb1cce748"} {"level":"info","ts":"2026-07-18T17:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04045d64cec25704816b986d84270d9cc09ed87c37b539039aede1bcb1cce748","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04045d64cec25704816b986d84270d9cc09ed87c37b539039aede1bcb1cce748","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:22:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:22:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["04045d64cec25704816b986d84270d9cc09ed87c37b539039aede1bcb1cce748"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-18T17:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"04045d64cec25704816b986d84270d9cc09ed87c37b539039aede1bcb1cce748","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"04045d64cec25704816b986d84270d9cc09ed87c37b539039aede1bcb1cce748\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-18T17:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04045d64cec25704816b986d84270d9cc09ed87c37b539039aede1bcb1cce748","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04045d64cec25704816b986d84270d9cc09ed87c37b539039aede1bcb1cce748","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T17:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04045d64cec25704816b986d84270d9cc09ed87c37b539039aede1bcb1cce748"} {"level":"debug","ts":"2026-07-18T17:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"057aca8234e4025b2d0d4da0c79c1b55ae32e285c821a2b6e2019f80b79e3281","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:22:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:22:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"057aca8234e4025b2d0d4da0c79c1b55ae32e285c821a2b6e2019f80b79e3281","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"057aca8234e4025b2d0d4da0c79c1b55ae32e285c821a2b6e2019f80b79e3281","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:22:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:22:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/057aca8234e4025b2d0d4da0c79c1b55ae32e285c821a2b6e2019f80b79e3281"} {"level":"info","ts":"2026-07-18T17:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"057aca8234e4025b2d0d4da0c79c1b55ae32e285c821a2b6e2019f80b79e3281","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:22:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:22:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"057aca8234e4025b2d0d4da0c79c1b55ae32e285c821a2b6e2019f80b79e3281","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:22:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:22:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["057aca8234e4025b2d0d4da0c79c1b55ae32e285c821a2b6e2019f80b79e3281"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4"} {"level":"info","ts":"2026-07-18T17:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"057aca8234e4025b2d0d4da0c79c1b55ae32e285c821a2b6e2019f80b79e3281","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:22:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:22:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/057aca8234e4025b2d0d4da0c79c1b55ae32e285c821a2b6e2019f80b79e3281"} {"level":"info","ts":"2026-07-18T17:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04045d64cec25704816b986d84270d9cc09ed87c37b539039aede1bcb1cce748","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:22:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:22:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["04045d64cec25704816b986d84270d9cc09ed87c37b539039aede1bcb1cce748"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04045d64cec25704816b986d84270d9cc09ed87c37b539039aede1bcb1cce748","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"057aca8234e4025b2d0d4da0c79c1b55ae32e285c821a2b6e2019f80b79e3281","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:22:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:22:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4"} {"level":"info","ts":"2026-07-18T17:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04045d64cec25704816b986d84270d9cc09ed87c37b539039aede1bcb1cce748","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:22:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:22:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/057aca8234e4025b2d0d4da0c79c1b55ae32e285c821a2b6e2019f80b79e3281"} {"level":"info","ts":"2026-07-18T17:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7c6e52202169abfb9c66eea59436b89614718350af3843b89896249e0fb1edf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:22:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:22:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7c6e52202169abfb9c66eea59436b89614718350af3843b89896249e0fb1edf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7c6e52202169abfb9c66eea59436b89614718350af3843b89896249e0fb1edf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T17:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04045d64cec25704816b986d84270d9cc09ed87c37b539039aede1bcb1cce748"} {"level":"debug","ts":"2026-07-18T17:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7c6e52202169abfb9c66eea59436b89614718350af3843b89896249e0fb1edf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T17:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4"} {"level":"debug","ts":"2026-07-18T17:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7c6e52202169abfb9c66eea59436b89614718350af3843b89896249e0fb1edf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:22:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:22:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7c6e52202169abfb9c66eea59436b89614718350af3843b89896249e0fb1edf"} {"level":"info","ts":"2026-07-18T17:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7c6e52202169abfb9c66eea59436b89614718350af3843b89896249e0fb1edf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7c6e52202169abfb9c66eea59436b89614718350af3843b89896249e0fb1edf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:22:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:22:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f7c6e52202169abfb9c66eea59436b89614718350af3843b89896249e0fb1edf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7c6e52202169abfb9c66eea59436b89614718350af3843b89896249e0fb1edf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7c6e52202169abfb9c66eea59436b89614718350af3843b89896249e0fb1edf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:22:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:22:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7c6e52202169abfb9c66eea59436b89614718350af3843b89896249e0fb1edf"} {"level":"info","ts":"2026-07-18T17:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7c6e52202169abfb9c66eea59436b89614718350af3843b89896249e0fb1edf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7c6e52202169abfb9c66eea59436b89614718350af3843b89896249e0fb1edf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7c6e52202169abfb9c66eea59436b89614718350af3843b89896249e0fb1edf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T17:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7c6e52202169abfb9c66eea59436b89614718350af3843b89896249e0fb1edf"} {"level":"debug","ts":"2026-07-18T17:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7c6e52202169abfb9c66eea59436b89614718350af3843b89896249e0fb1edf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T17:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7c6e52202169abfb9c66eea59436b89614718350af3843b89896249e0fb1edf"} {"level":"debug","ts":"2026-07-18T17:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7c6e52202169abfb9c66eea59436b89614718350af3843b89896249e0fb1edf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:22:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:22:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f7c6e52202169abfb9c66eea59436b89614718350af3843b89896249e0fb1edf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7c6e52202169abfb9c66eea59436b89614718350af3843b89896249e0fb1edf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7c6e52202169abfb9c66eea59436b89614718350af3843b89896249e0fb1edf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e96002ddfed2da222a5701361fccf65fdcad3bbb3ece51e10c27afabc7c8cdbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:22:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:22:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e96002ddfed2da222a5701361fccf65fdcad3bbb3ece51e10c27afabc7c8cdbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e96002ddfed2da222a5701361fccf65fdcad3bbb3ece51e10c27afabc7c8cdbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e96002ddfed2da222a5701361fccf65fdcad3bbb3ece51e10c27afabc7c8cdbd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T17:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7c6e52202169abfb9c66eea59436b89614718350af3843b89896249e0fb1edf"} {"level":"debug","ts":"2026-07-18T17:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e96002ddfed2da222a5701361fccf65fdcad3bbb3ece51e10c27afabc7c8cdbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:22:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:22:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e96002ddfed2da222a5701361fccf65fdcad3bbb3ece51e10c27afabc7c8cdbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e96002ddfed2da222a5701361fccf65fdcad3bbb3ece51e10c27afabc7c8cdbd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T17:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e96002ddfed2da222a5701361fccf65fdcad3bbb3ece51e10c27afabc7c8cdbd"} {"level":"info","ts":"2026-07-18T17:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e96002ddfed2da222a5701361fccf65fdcad3bbb3ece51e10c27afabc7c8cdbd"} {"level":"debug","ts":"2026-07-18T17:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7165f534f691afb40fe63819d7261caf74760aae46c101396be2bc783fc76301","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:22:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:22:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7165f534f691afb40fe63819d7261caf74760aae46c101396be2bc783fc76301","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e96002ddfed2da222a5701361fccf65fdcad3bbb3ece51e10c27afabc7c8cdbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:22:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:22:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e96002ddfed2da222a5701361fccf65fdcad3bbb3ece51e10c27afabc7c8cdbd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7165f534f691afb40fe63819d7261caf74760aae46c101396be2bc783fc76301"} {"level":"info","ts":"2026-07-18T17:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e96002ddfed2da222a5701361fccf65fdcad3bbb3ece51e10c27afabc7c8cdbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a9ab313b963f3421438923880d2651275d3e54c297413ae197bb30b0d155ea9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:22:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:22:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a9ab313b963f3421438923880d2651275d3e54c297413ae197bb30b0d155ea9"} {"level":"info","ts":"2026-07-18T17:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a9ab313b963f3421438923880d2651275d3e54c297413ae197bb30b0d155ea9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7165f534f691afb40fe63819d7261caf74760aae46c101396be2bc783fc76301","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:22:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:22:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7165f534f691afb40fe63819d7261caf74760aae46c101396be2bc783fc76301","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84f7fbf20daa8e42cb82d0dbd9c713768e0e64b1c17da612ae1eb2c5742b84c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:22:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:22:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7165f534f691afb40fe63819d7261caf74760aae46c101396be2bc783fc76301"} {"level":"info","ts":"2026-07-18T17:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84f7fbf20daa8e42cb82d0dbd9c713768e0e64b1c17da612ae1eb2c5742b84c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e96002ddfed2da222a5701361fccf65fdcad3bbb3ece51e10c27afabc7c8cdbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:22:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:22:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84f7fbf20daa8e42cb82d0dbd9c713768e0e64b1c17da612ae1eb2c5742b84c3"} {"level":"info","ts":"2026-07-18T17:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a9ab313b963f3421438923880d2651275d3e54c297413ae197bb30b0d155ea9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:22:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:22:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2a9ab313b963f3421438923880d2651275d3e54c297413ae197bb30b0d155ea9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a9ab313b963f3421438923880d2651275d3e54c297413ae197bb30b0d155ea9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7165f534f691afb40fe63819d7261caf74760aae46c101396be2bc783fc76301","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:22:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:22:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7165f534f691afb40fe63819d7261caf74760aae46c101396be2bc783fc76301"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e96002ddfed2da222a5701361fccf65fdcad3bbb3ece51e10c27afabc7c8cdbd"} {"level":"info","ts":"2026-07-18T17:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7165f534f691afb40fe63819d7261caf74760aae46c101396be2bc783fc76301","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84f7fbf20daa8e42cb82d0dbd9c713768e0e64b1c17da612ae1eb2c5742b84c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:22:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:22:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["84f7fbf20daa8e42cb82d0dbd9c713768e0e64b1c17da612ae1eb2c5742b84c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84f7fbf20daa8e42cb82d0dbd9c713768e0e64b1c17da612ae1eb2c5742b84c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:22:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:22:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0"} {"level":"info","ts":"2026-07-18T17:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a9ab313b963f3421438923880d2651275d3e54c297413ae197bb30b0d155ea9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:22:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:22:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a9ab313b963f3421438923880d2651275d3e54c297413ae197bb30b0d155ea9"} {"level":"info","ts":"2026-07-18T17:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a9ab313b963f3421438923880d2651275d3e54c297413ae197bb30b0d155ea9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7165f534f691afb40fe63819d7261caf74760aae46c101396be2bc783fc76301","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:22:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:22:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7165f534f691afb40fe63819d7261caf74760aae46c101396be2bc783fc76301"} {"level":"info","ts":"2026-07-18T17:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7165f534f691afb40fe63819d7261caf74760aae46c101396be2bc783fc76301","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84f7fbf20daa8e42cb82d0dbd9c713768e0e64b1c17da612ae1eb2c5742b84c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:22:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:22:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84f7fbf20daa8e42cb82d0dbd9c713768e0e64b1c17da612ae1eb2c5742b84c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:22:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:22:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84f7fbf20daa8e42cb82d0dbd9c713768e0e64b1c17da612ae1eb2c5742b84c3"} {"level":"info","ts":"2026-07-18T17:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a9ab313b963f3421438923880d2651275d3e54c297413ae197bb30b0d155ea9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:22:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:22:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2a9ab313b963f3421438923880d2651275d3e54c297413ae197bb30b0d155ea9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a9ab313b963f3421438923880d2651275d3e54c297413ae197bb30b0d155ea9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7165f534f691afb40fe63819d7261caf74760aae46c101396be2bc783fc76301","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:22:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:22:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7165f534f691afb40fe63819d7261caf74760aae46c101396be2bc783fc76301"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0"} {"level":"info","ts":"2026-07-18T17:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7165f534f691afb40fe63819d7261caf74760aae46c101396be2bc783fc76301","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84f7fbf20daa8e42cb82d0dbd9c713768e0e64b1c17da612ae1eb2c5742b84c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:22:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:22:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["84f7fbf20daa8e42cb82d0dbd9c713768e0e64b1c17da612ae1eb2c5742b84c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a9ab313b963f3421438923880d2651275d3e54c297413ae197bb30b0d155ea9"} {"level":"info","ts":"2026-07-18T17:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84f7fbf20daa8e42cb82d0dbd9c713768e0e64b1c17da612ae1eb2c5742b84c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a9ab313b963f3421438923880d2651275d3e54c297413ae197bb30b0d155ea9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7165f534f691afb40fe63819d7261caf74760aae46c101396be2bc783fc76301","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:22:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:22:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7165f534f691afb40fe63819d7261caf74760aae46c101396be2bc783fc76301"} {"level":"info","ts":"2026-07-18T17:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7165f534f691afb40fe63819d7261caf74760aae46c101396be2bc783fc76301","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84f7fbf20daa8e42cb82d0dbd9c713768e0e64b1c17da612ae1eb2c5742b84c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:22:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:22:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84f7fbf20daa8e42cb82d0dbd9c713768e0e64b1c17da612ae1eb2c5742b84c3"} {"level":"info","ts":"2026-07-18T17:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0"} {"level":"info","ts":"2026-07-18T17:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84f7fbf20daa8e42cb82d0dbd9c713768e0e64b1c17da612ae1eb2c5742b84c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7165f534f691afb40fe63819d7261caf74760aae46c101396be2bc783fc76301","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84f7fbf20daa8e42cb82d0dbd9c713768e0e64b1c17da612ae1eb2c5742b84c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:22:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:22:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["84f7fbf20daa8e42cb82d0dbd9c713768e0e64b1c17da612ae1eb2c5742b84c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7165f534f691afb40fe63819d7261caf74760aae46c101396be2bc783fc76301"} {"level":"info","ts":"2026-07-18T17:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84f7fbf20daa8e42cb82d0dbd9c713768e0e64b1c17da612ae1eb2c5742b84c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7165f534f691afb40fe63819d7261caf74760aae46c101396be2bc783fc76301","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:22:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:22:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7165f534f691afb40fe63819d7261caf74760aae46c101396be2bc783fc76301"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84f7fbf20daa8e42cb82d0dbd9c713768e0e64b1c17da612ae1eb2c5742b84c3"} {"level":"info","ts":"2026-07-18T17:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7165f534f691afb40fe63819d7261caf74760aae46c101396be2bc783fc76301","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84f7fbf20daa8e42cb82d0dbd9c713768e0e64b1c17da612ae1eb2c5742b84c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:22:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:22:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84f7fbf20daa8e42cb82d0dbd9c713768e0e64b1c17da612ae1eb2c5742b84c3"} {"level":"info","ts":"2026-07-18T17:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7165f534f691afb40fe63819d7261caf74760aae46c101396be2bc783fc76301"} {"level":"info","ts":"2026-07-18T17:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84f7fbf20daa8e42cb82d0dbd9c713768e0e64b1c17da612ae1eb2c5742b84c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7165f534f691afb40fe63819d7261caf74760aae46c101396be2bc783fc76301","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84f7fbf20daa8e42cb82d0dbd9c713768e0e64b1c17da612ae1eb2c5742b84c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84f7fbf20daa8e42cb82d0dbd9c713768e0e64b1c17da612ae1eb2c5742b84c3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T17:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84f7fbf20daa8e42cb82d0dbd9c713768e0e64b1c17da612ae1eb2c5742b84c3"} {"level":"debug","ts":"2026-07-18T17:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84f7fbf20daa8e42cb82d0dbd9c713768e0e64b1c17da612ae1eb2c5742b84c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:22:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:22:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["84f7fbf20daa8e42cb82d0dbd9c713768e0e64b1c17da612ae1eb2c5742b84c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84f7fbf20daa8e42cb82d0dbd9c713768e0e64b1c17da612ae1eb2c5742b84c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84f7fbf20daa8e42cb82d0dbd9c713768e0e64b1c17da612ae1eb2c5742b84c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:22:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:22:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84f7fbf20daa8e42cb82d0dbd9c713768e0e64b1c17da612ae1eb2c5742b84c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84f7fbf20daa8e42cb82d0dbd9c713768e0e64b1c17da612ae1eb2c5742b84c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84f7fbf20daa8e42cb82d0dbd9c713768e0e64b1c17da612ae1eb2c5742b84c3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T17:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84f7fbf20daa8e42cb82d0dbd9c713768e0e64b1c17da612ae1eb2c5742b84c3"} {"level":"debug","ts":"2026-07-18T17:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84f7fbf20daa8e42cb82d0dbd9c713768e0e64b1c17da612ae1eb2c5742b84c3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T17:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84f7fbf20daa8e42cb82d0dbd9c713768e0e64b1c17da612ae1eb2c5742b84c3"} {"level":"debug","ts":"2026-07-18T17:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84f7fbf20daa8e42cb82d0dbd9c713768e0e64b1c17da612ae1eb2c5742b84c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:22:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:22:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["84f7fbf20daa8e42cb82d0dbd9c713768e0e64b1c17da612ae1eb2c5742b84c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84f7fbf20daa8e42cb82d0dbd9c713768e0e64b1c17da612ae1eb2c5742b84c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84f7fbf20daa8e42cb82d0dbd9c713768e0e64b1c17da612ae1eb2c5742b84c3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T17:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84f7fbf20daa8e42cb82d0dbd9c713768e0e64b1c17da612ae1eb2c5742b84c3"} {"level":"info","ts":"2026-07-18T17:22:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"58bb5955-1563-4c60-81f4-33ed6edf01cf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:59858","PortSpecifier":{"PortValue":59858}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"58bb5955-1563-4c60-81f4-33ed6edf01cf","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-78538d.apps.895c59d4-5776-4983-8d76-ee2580b4b8e8.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-18T17:22:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"58bb5955-1563-4c60-81f4-33ed6edf01cf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:59858","PortSpecifier":{"PortValue":59858}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784395344,"nanos":645638805},"http":{"id":"58bb5955-1563-4c60-81f4-33ed6edf01cf","method":"POST","headers":{":authority":"e2e-shared-a-78538d.apps.895c59d4-5776-4983-8d76-ee2580b4b8e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T17:22:24Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"58bb5955-1563-4c60-81f4-33ed6edf01cf","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-18T17:22:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"58bb5955-1563-4c60-81f4-33ed6edf01cf","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f1b895b9-520b-4c73-9653-1fa79c8c3661","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6e438633-d12a-44b1-b014-279cffb6963d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ee2580b4b8e8"]}} {"level":"debug","ts":"2026-07-18T17:22:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"58bb5955-1563-4c60-81f4-33ed6edf01cf","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ee2580b4b8e8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6e438633-d12a-44b1-b014-279cffb6963d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f1b895b9-520b-4c73-9653-1fa79c8c3661","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"175e4cdc26d29960ce6d8bc2fba411fcbffab1591b5450037d0d5fa45b78d0bd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-78538d.apps.895c59d4-5776-4983-8d76-ee2580b4b8e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T17:22:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"58bb5955-1563-4c60-81f4-33ed6edf01cf","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T17:22:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"58bb5955-1563-4c60-81f4-33ed6edf01cf","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T17:22:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"58bb5955-1563-4c60-81f4-33ed6edf01cf","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-78538d/auth-test-model-78538d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-78538d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T17:22:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"58bb5955-1563-4c60-81f4-33ed6edf01cf","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-18T17:22:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"58bb5955-1563-4c60-81f4-33ed6edf01cf","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-18T17:22:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"58bb5955-1563-4c60-81f4-33ed6edf01cf","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-18T17:22:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"58bb5955-1563-4c60-81f4-33ed6edf01cf","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-18T17:22:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"58bb5955-1563-4c60-81f4-33ed6edf01cf","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-18T17:22:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"abaa8712-ed46-4081-92a0-699dc209eb0c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:44784","PortSpecifier":{"PortValue":44784}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"abaa8712-ed46-4081-92a0-699dc209eb0c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-497f21.apps.895c59d4-5776-4983-8d76-ee2580b4b8e8.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-18T17:22:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"abaa8712-ed46-4081-92a0-699dc209eb0c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:44784","PortSpecifier":{"PortValue":44784}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784395344,"nanos":678350165},"http":{"id":"abaa8712-ed46-4081-92a0-699dc209eb0c","method":"POST","headers":{":authority":"e2e-shared-b-497f21.apps.895c59d4-5776-4983-8d76-ee2580b4b8e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T17:22:24Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"abaa8712-ed46-4081-92a0-699dc209eb0c","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-18T17:22:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"abaa8712-ed46-4081-92a0-699dc209eb0c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f1b895b9-520b-4c73-9653-1fa79c8c3661","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6e438633-d12a-44b1-b014-279cffb6963d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ee2580b4b8e8"]}} {"level":"debug","ts":"2026-07-18T17:22:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"abaa8712-ed46-4081-92a0-699dc209eb0c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ee2580b4b8e8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6e438633-d12a-44b1-b014-279cffb6963d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f1b895b9-520b-4c73-9653-1fa79c8c3661","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-497f21.apps.895c59d4-5776-4983-8d76-ee2580b4b8e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T17:22:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"abaa8712-ed46-4081-92a0-699dc209eb0c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T17:22:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"abaa8712-ed46-4081-92a0-699dc209eb0c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T17:22:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"abaa8712-ed46-4081-92a0-699dc209eb0c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-497f21/auth-test-model-497f21\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-497f21/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T17:22:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"abaa8712-ed46-4081-92a0-699dc209eb0c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-18T17:22:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"abaa8712-ed46-4081-92a0-699dc209eb0c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-18T17:22:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"abaa8712-ed46-4081-92a0-699dc209eb0c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-18T17:22:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"abaa8712-ed46-4081-92a0-699dc209eb0c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-18T17:22:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"abaa8712-ed46-4081-92a0-699dc209eb0c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-18T17:22:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fa7a123b-33d0-4dd3-a75e-8044ecf77e19","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:44800","PortSpecifier":{"PortValue":44800}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fa7a123b-33d0-4dd3-a75e-8044ecf77e19","method":"GET","path":"/maas-api/v1/api-keys/16a655cd-91f7-4c8b-960a-2eb55a854c0b","host":"e2e-shared-b-497f21.apps.895c59d4-5776-4983-8d76-ee2580b4b8e8.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-18T17:22:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fa7a123b-33d0-4dd3-a75e-8044ecf77e19","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:44800","PortSpecifier":{"PortValue":44800}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784395344,"nanos":717338959},"http":{"id":"fa7a123b-33d0-4dd3-a75e-8044ecf77e19","method":"GET","headers":{":authority":"e2e-shared-b-497f21.apps.895c59d4-5776-4983-8d76-ee2580b4b8e8.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/16a655cd-91f7-4c8b-960a-2eb55a854c0b",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T17:22:24Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fa7a123b-33d0-4dd3-a75e-8044ecf77e19","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-18T17:22:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fa7a123b-33d0-4dd3-a75e-8044ecf77e19","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f1b895b9-520b-4c73-9653-1fa79c8c3661","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6e438633-d12a-44b1-b014-279cffb6963d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ee2580b4b8e8"]}} {"level":"debug","ts":"2026-07-18T17:22:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fa7a123b-33d0-4dd3-a75e-8044ecf77e19","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ee2580b4b8e8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6e438633-d12a-44b1-b014-279cffb6963d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f1b895b9-520b-4c73-9653-1fa79c8c3661","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-497f21.apps.895c59d4-5776-4983-8d76-ee2580b4b8e8.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/16a655cd-91f7-4c8b-960a-2eb55a854c0b",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T17:22:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fa7a123b-33d0-4dd3-a75e-8044ecf77e19","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T17:22:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fa7a123b-33d0-4dd3-a75e-8044ecf77e19","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T17:22:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fa7a123b-33d0-4dd3-a75e-8044ecf77e19","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-497f21/auth-test-model-497f21\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-497f21/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T17:22:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fa7a123b-33d0-4dd3-a75e-8044ecf77e19","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-18T17:22:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fa7a123b-33d0-4dd3-a75e-8044ecf77e19","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-18T17:22:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fa7a123b-33d0-4dd3-a75e-8044ecf77e19","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-18T17:22:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fa7a123b-33d0-4dd3-a75e-8044ecf77e19","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-18T17:22:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fa7a123b-33d0-4dd3-a75e-8044ecf77e19","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-18T17:22:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f7fc4426-d1fd-4933-885e-73c2bb383bd3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:59860","PortSpecifier":{"PortValue":59860}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f7fc4426-d1fd-4933-885e-73c2bb383bd3","method":"GET","path":"/maas-api/v1/api-keys/16a655cd-91f7-4c8b-960a-2eb55a854c0b","host":"e2e-shared-a-78538d.apps.895c59d4-5776-4983-8d76-ee2580b4b8e8.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-18T17:22:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f7fc4426-d1fd-4933-885e-73c2bb383bd3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:59860","PortSpecifier":{"PortValue":59860}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784395344,"nanos":755016613},"http":{"id":"f7fc4426-d1fd-4933-885e-73c2bb383bd3","method":"GET","headers":{":authority":"e2e-shared-a-78538d.apps.895c59d4-5776-4983-8d76-ee2580b4b8e8.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/16a655cd-91f7-4c8b-960a-2eb55a854c0b",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T17:22:24Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f7fc4426-d1fd-4933-885e-73c2bb383bd3","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-18T17:22:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f7fc4426-d1fd-4933-885e-73c2bb383bd3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f1b895b9-520b-4c73-9653-1fa79c8c3661","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6e438633-d12a-44b1-b014-279cffb6963d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ee2580b4b8e8"]}} {"level":"debug","ts":"2026-07-18T17:22:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f7fc4426-d1fd-4933-885e-73c2bb383bd3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ee2580b4b8e8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6e438633-d12a-44b1-b014-279cffb6963d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f1b895b9-520b-4c73-9653-1fa79c8c3661","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"175e4cdc26d29960ce6d8bc2fba411fcbffab1591b5450037d0d5fa45b78d0bd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-78538d.apps.895c59d4-5776-4983-8d76-ee2580b4b8e8.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/16a655cd-91f7-4c8b-960a-2eb55a854c0b",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T17:22:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f7fc4426-d1fd-4933-885e-73c2bb383bd3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T17:22:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f7fc4426-d1fd-4933-885e-73c2bb383bd3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T17:22:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f7fc4426-d1fd-4933-885e-73c2bb383bd3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-78538d/auth-test-model-78538d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-78538d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T17:22:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f7fc4426-d1fd-4933-885e-73c2bb383bd3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-18T17:22:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f7fc4426-d1fd-4933-885e-73c2bb383bd3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-18T17:22:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f7fc4426-d1fd-4933-885e-73c2bb383bd3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-18T17:22:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f7fc4426-d1fd-4933-885e-73c2bb383bd3","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-18T17:22:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f7fc4426-d1fd-4933-885e-73c2bb383bd3","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-18T17:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2d8a3bb09f0949758e20b65e6ac48288d66c431dfc0cd57891b4023665c63688"} {"level":"info","ts":"2026-07-18T17:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4"} {"level":"info","ts":"2026-07-18T17:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2a9ab313b963f3421438923880d2651275d3e54c297413ae197bb30b0d155ea9"} {"level":"info","ts":"2026-07-18T17:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/057aca8234e4025b2d0d4da0c79c1b55ae32e285c821a2b6e2019f80b79e3281"} {"level":"info","ts":"2026-07-18T17:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f7c6e52202169abfb9c66eea59436b89614718350af3843b89896249e0fb1edf"} {"level":"info","ts":"2026-07-18T17:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/84f7fbf20daa8e42cb82d0dbd9c713768e0e64b1c17da612ae1eb2c5742b84c3"} {"level":"info","ts":"2026-07-18T17:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/18136a7ea3224fd4fe8d635f843eeb7edcb7aef1c349914ac7d6844a9ff43eff"} {"level":"info","ts":"2026-07-18T17:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/04045d64cec25704816b986d84270d9cc09ed87c37b539039aede1bcb1cce748"} {"level":"info","ts":"2026-07-18T17:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eeec35435dae4d11ef4448e7497f2507b94c577c6d026a60914fe8dd7dfc631a"} {"level":"info","ts":"2026-07-18T17:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0"} {"level":"info","ts":"2026-07-18T17:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7165f534f691afb40fe63819d7261caf74760aae46c101396be2bc783fc76301"} {"level":"info","ts":"2026-07-18T17:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e96002ddfed2da222a5701361fccf65fdcad3bbb3ece51e10c27afabc7c8cdbd"} {"level":"debug","ts":"2026-07-18T17:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:22:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:22:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T17:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0"} {"level":"debug","ts":"2026-07-18T17:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T17:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0"} {"level":"debug","ts":"2026-07-18T17:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:22:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:22:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:22:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:22:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T17:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0"} {"level":"debug","ts":"2026-07-18T17:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T17:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0"} {"level":"debug","ts":"2026-07-18T17:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:22:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:22:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:22:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:22:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4"} {"level":"info","ts":"2026-07-18T17:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:22:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:22:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:22:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:22:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0"} {"level":"info","ts":"2026-07-18T17:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:22:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:22:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4"} {"level":"info","ts":"2026-07-18T17:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:22:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:22:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T17:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0"} {"level":"debug","ts":"2026-07-18T17:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:22:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:22:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T17:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4"} {"level":"info","ts":"2026-07-18T17:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0"} {"level":"debug","ts":"2026-07-18T17:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e96002ddfed2da222a5701361fccf65fdcad3bbb3ece51e10c27afabc7c8cdbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:22:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:22:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e96002ddfed2da222a5701361fccf65fdcad3bbb3ece51e10c27afabc7c8cdbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e96002ddfed2da222a5701361fccf65fdcad3bbb3ece51e10c27afabc7c8cdbd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T17:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e96002ddfed2da222a5701361fccf65fdcad3bbb3ece51e10c27afabc7c8cdbd"} {"level":"debug","ts":"2026-07-18T17:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e96002ddfed2da222a5701361fccf65fdcad3bbb3ece51e10c27afabc7c8cdbd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T17:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e96002ddfed2da222a5701361fccf65fdcad3bbb3ece51e10c27afabc7c8cdbd"} {"level":"debug","ts":"2026-07-18T17:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e96002ddfed2da222a5701361fccf65fdcad3bbb3ece51e10c27afabc7c8cdbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:22:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:22:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e96002ddfed2da222a5701361fccf65fdcad3bbb3ece51e10c27afabc7c8cdbd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e96002ddfed2da222a5701361fccf65fdcad3bbb3ece51e10c27afabc7c8cdbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e96002ddfed2da222a5701361fccf65fdcad3bbb3ece51e10c27afabc7c8cdbd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T17:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e96002ddfed2da222a5701361fccf65fdcad3bbb3ece51e10c27afabc7c8cdbd"} {"level":"debug","ts":"2026-07-18T17:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7165f534f691afb40fe63819d7261caf74760aae46c101396be2bc783fc76301","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:22:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:22:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7165f534f691afb40fe63819d7261caf74760aae46c101396be2bc783fc76301","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7165f534f691afb40fe63819d7261caf74760aae46c101396be2bc783fc76301","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:22:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:22:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7165f534f691afb40fe63819d7261caf74760aae46c101396be2bc783fc76301"} {"level":"info","ts":"2026-07-18T17:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7165f534f691afb40fe63819d7261caf74760aae46c101396be2bc783fc76301","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7165f534f691afb40fe63819d7261caf74760aae46c101396be2bc783fc76301","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7165f534f691afb40fe63819d7261caf74760aae46c101396be2bc783fc76301","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T17:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7165f534f691afb40fe63819d7261caf74760aae46c101396be2bc783fc76301"} {"level":"debug","ts":"2026-07-18T17:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7165f534f691afb40fe63819d7261caf74760aae46c101396be2bc783fc76301","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d8a3bb09f0949758e20b65e6ac48288d66c431dfc0cd57891b4023665c63688","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:22:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:22:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7165f534f691afb40fe63819d7261caf74760aae46c101396be2bc783fc76301"} {"level":"info","ts":"2026-07-18T17:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d8a3bb09f0949758e20b65e6ac48288d66c431dfc0cd57891b4023665c63688","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d8a3bb09f0949758e20b65e6ac48288d66c431dfc0cd57891b4023665c63688","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:22:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:22:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d8a3bb09f0949758e20b65e6ac48288d66c431dfc0cd57891b4023665c63688"} {"level":"info","ts":"2026-07-18T17:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d8a3bb09f0949758e20b65e6ac48288d66c431dfc0cd57891b4023665c63688","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d8a3bb09f0949758e20b65e6ac48288d66c431dfc0cd57891b4023665c63688","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:22:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:22:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-18T17:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2d8a3bb09f0949758e20b65e6ac48288d66c431dfc0cd57891b4023665c63688","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2d8a3bb09f0949758e20b65e6ac48288d66c431dfc0cd57891b4023665c63688\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-18T17:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d8a3bb09f0949758e20b65e6ac48288d66c431dfc0cd57891b4023665c63688","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d8a3bb09f0949758e20b65e6ac48288d66c431dfc0cd57891b4023665c63688","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T17:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d8a3bb09f0949758e20b65e6ac48288d66c431dfc0cd57891b4023665c63688"} {"level":"debug","ts":"2026-07-18T17:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7165f534f691afb40fe63819d7261caf74760aae46c101396be2bc783fc76301","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:22:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:22:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7165f534f691afb40fe63819d7261caf74760aae46c101396be2bc783fc76301"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d8a3bb09f0949758e20b65e6ac48288d66c431dfc0cd57891b4023665c63688"} {"level":"info","ts":"2026-07-18T17:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7165f534f691afb40fe63819d7261caf74760aae46c101396be2bc783fc76301","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7165f534f691afb40fe63819d7261caf74760aae46c101396be2bc783fc76301","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"057aca8234e4025b2d0d4da0c79c1b55ae32e285c821a2b6e2019f80b79e3281","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:22:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:22:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7165f534f691afb40fe63819d7261caf74760aae46c101396be2bc783fc76301"} {"level":"info","ts":"2026-07-18T17:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"057aca8234e4025b2d0d4da0c79c1b55ae32e285c821a2b6e2019f80b79e3281","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"057aca8234e4025b2d0d4da0c79c1b55ae32e285c821a2b6e2019f80b79e3281","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:22:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:22:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/057aca8234e4025b2d0d4da0c79c1b55ae32e285c821a2b6e2019f80b79e3281"} {"level":"info","ts":"2026-07-18T17:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"057aca8234e4025b2d0d4da0c79c1b55ae32e285c821a2b6e2019f80b79e3281","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d8a3bb09f0949758e20b65e6ac48288d66c431dfc0cd57891b4023665c63688","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:22:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:22:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2d8a3bb09f0949758e20b65e6ac48288d66c431dfc0cd57891b4023665c63688"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d8a3bb09f0949758e20b65e6ac48288d66c431dfc0cd57891b4023665c63688","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"057aca8234e4025b2d0d4da0c79c1b55ae32e285c821a2b6e2019f80b79e3281","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d8a3bb09f0949758e20b65e6ac48288d66c431dfc0cd57891b4023665c63688","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T17:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/057aca8234e4025b2d0d4da0c79c1b55ae32e285c821a2b6e2019f80b79e3281"} {"level":"debug","ts":"2026-07-18T17:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"057aca8234e4025b2d0d4da0c79c1b55ae32e285c821a2b6e2019f80b79e3281","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:22:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:22:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["057aca8234e4025b2d0d4da0c79c1b55ae32e285c821a2b6e2019f80b79e3281"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d8a3bb09f0949758e20b65e6ac48288d66c431dfc0cd57891b4023665c63688"} {"level":"info","ts":"2026-07-18T17:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"057aca8234e4025b2d0d4da0c79c1b55ae32e285c821a2b6e2019f80b79e3281","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"057aca8234e4025b2d0d4da0c79c1b55ae32e285c821a2b6e2019f80b79e3281","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:22:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:22:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/057aca8234e4025b2d0d4da0c79c1b55ae32e285c821a2b6e2019f80b79e3281"} {"level":"info","ts":"2026-07-18T17:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"057aca8234e4025b2d0d4da0c79c1b55ae32e285c821a2b6e2019f80b79e3281","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84f7fbf20daa8e42cb82d0dbd9c713768e0e64b1c17da612ae1eb2c5742b84c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:22:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:22:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/057aca8234e4025b2d0d4da0c79c1b55ae32e285c821a2b6e2019f80b79e3281"} {"level":"info","ts":"2026-07-18T17:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84f7fbf20daa8e42cb82d0dbd9c713768e0e64b1c17da612ae1eb2c5742b84c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"057aca8234e4025b2d0d4da0c79c1b55ae32e285c821a2b6e2019f80b79e3281","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:22:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:22:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["057aca8234e4025b2d0d4da0c79c1b55ae32e285c821a2b6e2019f80b79e3281"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84f7fbf20daa8e42cb82d0dbd9c713768e0e64b1c17da612ae1eb2c5742b84c3"} {"level":"info","ts":"2026-07-18T17:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"057aca8234e4025b2d0d4da0c79c1b55ae32e285c821a2b6e2019f80b79e3281","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a9ab313b963f3421438923880d2651275d3e54c297413ae197bb30b0d155ea9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:22:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:22:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/057aca8234e4025b2d0d4da0c79c1b55ae32e285c821a2b6e2019f80b79e3281"} {"level":"info","ts":"2026-07-18T17:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a9ab313b963f3421438923880d2651275d3e54c297413ae197bb30b0d155ea9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84f7fbf20daa8e42cb82d0dbd9c713768e0e64b1c17da612ae1eb2c5742b84c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:22:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:22:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["84f7fbf20daa8e42cb82d0dbd9c713768e0e64b1c17da612ae1eb2c5742b84c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a9ab313b963f3421438923880d2651275d3e54c297413ae197bb30b0d155ea9"} {"level":"info","ts":"2026-07-18T17:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84f7fbf20daa8e42cb82d0dbd9c713768e0e64b1c17da612ae1eb2c5742b84c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"057aca8234e4025b2d0d4da0c79c1b55ae32e285c821a2b6e2019f80b79e3281","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a9ab313b963f3421438923880d2651275d3e54c297413ae197bb30b0d155ea9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:22:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:22:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2a9ab313b963f3421438923880d2651275d3e54c297413ae197bb30b0d155ea9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84f7fbf20daa8e42cb82d0dbd9c713768e0e64b1c17da612ae1eb2c5742b84c3"} {"level":"info","ts":"2026-07-18T17:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a9ab313b963f3421438923880d2651275d3e54c297413ae197bb30b0d155ea9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84f7fbf20daa8e42cb82d0dbd9c713768e0e64b1c17da612ae1eb2c5742b84c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a9ab313b963f3421438923880d2651275d3e54c297413ae197bb30b0d155ea9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T17:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/057aca8234e4025b2d0d4da0c79c1b55ae32e285c821a2b6e2019f80b79e3281"} {"level":"info","ts":"2026-07-18T17:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a9ab313b963f3421438923880d2651275d3e54c297413ae197bb30b0d155ea9"} {"level":"info","ts":"2026-07-18T17:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84f7fbf20daa8e42cb82d0dbd9c713768e0e64b1c17da612ae1eb2c5742b84c3"} {"level":"debug","ts":"2026-07-18T17:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04045d64cec25704816b986d84270d9cc09ed87c37b539039aede1bcb1cce748","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:22:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:22:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04045d64cec25704816b986d84270d9cc09ed87c37b539039aede1bcb1cce748","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04045d64cec25704816b986d84270d9cc09ed87c37b539039aede1bcb1cce748","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:22:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:22:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04045d64cec25704816b986d84270d9cc09ed87c37b539039aede1bcb1cce748"} {"level":"info","ts":"2026-07-18T17:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04045d64cec25704816b986d84270d9cc09ed87c37b539039aede1bcb1cce748","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04045d64cec25704816b986d84270d9cc09ed87c37b539039aede1bcb1cce748","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:22:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:22:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-18T17:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"04045d64cec25704816b986d84270d9cc09ed87c37b539039aede1bcb1cce748","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"04045d64cec25704816b986d84270d9cc09ed87c37b539039aede1bcb1cce748\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-18T17:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04045d64cec25704816b986d84270d9cc09ed87c37b539039aede1bcb1cce748","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04045d64cec25704816b986d84270d9cc09ed87c37b539039aede1bcb1cce748","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T17:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04045d64cec25704816b986d84270d9cc09ed87c37b539039aede1bcb1cce748"} {"level":"info","ts":"2026-07-18T17:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04045d64cec25704816b986d84270d9cc09ed87c37b539039aede1bcb1cce748"} {"level":"debug","ts":"2026-07-18T17:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eeec35435dae4d11ef4448e7497f2507b94c577c6d026a60914fe8dd7dfc631a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:22:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:22:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eeec35435dae4d11ef4448e7497f2507b94c577c6d026a60914fe8dd7dfc631a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18136a7ea3224fd4fe8d635f843eeb7edcb7aef1c349914ac7d6844a9ff43eff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:22:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:22:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eeec35435dae4d11ef4448e7497f2507b94c577c6d026a60914fe8dd7dfc631a"} {"level":"info","ts":"2026-07-18T17:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18136a7ea3224fd4fe8d635f843eeb7edcb7aef1c349914ac7d6844a9ff43eff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eeec35435dae4d11ef4448e7497f2507b94c577c6d026a60914fe8dd7dfc631a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:22:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:22:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eeec35435dae4d11ef4448e7497f2507b94c577c6d026a60914fe8dd7dfc631a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18136a7ea3224fd4fe8d635f843eeb7edcb7aef1c349914ac7d6844a9ff43eff"} {"level":"info","ts":"2026-07-18T17:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eeec35435dae4d11ef4448e7497f2507b94c577c6d026a60914fe8dd7dfc631a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04045d64cec25704816b986d84270d9cc09ed87c37b539039aede1bcb1cce748","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:22:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:22:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["04045d64cec25704816b986d84270d9cc09ed87c37b539039aede1bcb1cce748"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04045d64cec25704816b986d84270d9cc09ed87c37b539039aede1bcb1cce748","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7c6e52202169abfb9c66eea59436b89614718350af3843b89896249e0fb1edf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:22:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:22:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eeec35435dae4d11ef4448e7497f2507b94c577c6d026a60914fe8dd7dfc631a"} {"level":"info","ts":"2026-07-18T17:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7c6e52202169abfb9c66eea59436b89614718350af3843b89896249e0fb1edf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18136a7ea3224fd4fe8d635f843eeb7edcb7aef1c349914ac7d6844a9ff43eff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:22:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:22:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18136a7ea3224fd4fe8d635f843eeb7edcb7aef1c349914ac7d6844a9ff43eff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18136a7ea3224fd4fe8d635f843eeb7edcb7aef1c349914ac7d6844a9ff43eff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eeec35435dae4d11ef4448e7497f2507b94c577c6d026a60914fe8dd7dfc631a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04045d64cec25704816b986d84270d9cc09ed87c37b539039aede1bcb1cce748","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7c6e52202169abfb9c66eea59436b89614718350af3843b89896249e0fb1edf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:22:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:22:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7c6e52202169abfb9c66eea59436b89614718350af3843b89896249e0fb1edf"} {"level":"info","ts":"2026-07-18T17:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7c6e52202169abfb9c66eea59436b89614718350af3843b89896249e0fb1edf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18136a7ea3224fd4fe8d635f843eeb7edcb7aef1c349914ac7d6844a9ff43eff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:22:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:22:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18136a7ea3224fd4fe8d635f843eeb7edcb7aef1c349914ac7d6844a9ff43eff"} {"level":"info","ts":"2026-07-18T17:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18136a7ea3224fd4fe8d635f843eeb7edcb7aef1c349914ac7d6844a9ff43eff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7c6e52202169abfb9c66eea59436b89614718350af3843b89896249e0fb1edf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:22:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:22:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f7c6e52202169abfb9c66eea59436b89614718350af3843b89896249e0fb1edf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7c6e52202169abfb9c66eea59436b89614718350af3843b89896249e0fb1edf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18136a7ea3224fd4fe8d635f843eeb7edcb7aef1c349914ac7d6844a9ff43eff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:22:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:22:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18136a7ea3224fd4fe8d635f843eeb7edcb7aef1c349914ac7d6844a9ff43eff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04045d64cec25704816b986d84270d9cc09ed87c37b539039aede1bcb1cce748"} {"level":"info","ts":"2026-07-18T17:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18136a7ea3224fd4fe8d635f843eeb7edcb7aef1c349914ac7d6844a9ff43eff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7c6e52202169abfb9c66eea59436b89614718350af3843b89896249e0fb1edf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18136a7ea3224fd4fe8d635f843eeb7edcb7aef1c349914ac7d6844a9ff43eff","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T17:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eeec35435dae4d11ef4448e7497f2507b94c577c6d026a60914fe8dd7dfc631a"} {"level":"info","ts":"2026-07-18T17:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7c6e52202169abfb9c66eea59436b89614718350af3843b89896249e0fb1edf"} {"level":"info","ts":"2026-07-18T17:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18136a7ea3224fd4fe8d635f843eeb7edcb7aef1c349914ac7d6844a9ff43eff"} {"level":"info","ts":"2026-07-18T17:22:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f4224090-a762-47c4-bcf5-6bd09bbc0d4f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:33722","PortSpecifier":{"PortValue":33722}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f4224090-a762-47c4-bcf5-6bd09bbc0d4f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-78538d.apps.895c59d4-5776-4983-8d76-ee2580b4b8e8.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-18T17:22:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f4224090-a762-47c4-bcf5-6bd09bbc0d4f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:33722","PortSpecifier":{"PortValue":33722}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784395361,"nanos":796240987},"http":{"id":"f4224090-a762-47c4-bcf5-6bd09bbc0d4f","method":"POST","headers":{":authority":"e2e-shared-a-78538d.apps.895c59d4-5776-4983-8d76-ee2580b4b8e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T17:22:41Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f4224090-a762-47c4-bcf5-6bd09bbc0d4f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-18T17:22:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f4224090-a762-47c4-bcf5-6bd09bbc0d4f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f1b895b9-520b-4c73-9653-1fa79c8c3661","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6e438633-d12a-44b1-b014-279cffb6963d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ee2580b4b8e8"]}} {"level":"debug","ts":"2026-07-18T17:22:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f4224090-a762-47c4-bcf5-6bd09bbc0d4f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ee2580b4b8e8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6e438633-d12a-44b1-b014-279cffb6963d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f1b895b9-520b-4c73-9653-1fa79c8c3661","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"175e4cdc26d29960ce6d8bc2fba411fcbffab1591b5450037d0d5fa45b78d0bd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-78538d.apps.895c59d4-5776-4983-8d76-ee2580b4b8e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T17:22:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f4224090-a762-47c4-bcf5-6bd09bbc0d4f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T17:22:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f4224090-a762-47c4-bcf5-6bd09bbc0d4f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T17:22:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f4224090-a762-47c4-bcf5-6bd09bbc0d4f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-78538d/auth-test-model-78538d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-78538d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T17:22:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f4224090-a762-47c4-bcf5-6bd09bbc0d4f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-18T17:22:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f4224090-a762-47c4-bcf5-6bd09bbc0d4f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-18T17:22:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f4224090-a762-47c4-bcf5-6bd09bbc0d4f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-18T17:22:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f4224090-a762-47c4-bcf5-6bd09bbc0d4f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-18T17:22:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f4224090-a762-47c4-bcf5-6bd09bbc0d4f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-18T17:22:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0937a262-6bde-4596-904e-167de3c6465a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:57638","PortSpecifier":{"PortValue":57638}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0937a262-6bde-4596-904e-167de3c6465a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-497f21.apps.895c59d4-5776-4983-8d76-ee2580b4b8e8.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-18T17:22:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0937a262-6bde-4596-904e-167de3c6465a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:57638","PortSpecifier":{"PortValue":57638}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784395361,"nanos":840056818},"http":{"id":"0937a262-6bde-4596-904e-167de3c6465a","method":"POST","headers":{":authority":"e2e-shared-b-497f21.apps.895c59d4-5776-4983-8d76-ee2580b4b8e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T17:22:41Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0937a262-6bde-4596-904e-167de3c6465a","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-18T17:22:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0937a262-6bde-4596-904e-167de3c6465a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f1b895b9-520b-4c73-9653-1fa79c8c3661","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6e438633-d12a-44b1-b014-279cffb6963d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ee2580b4b8e8"]}} {"level":"debug","ts":"2026-07-18T17:22:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0937a262-6bde-4596-904e-167de3c6465a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ee2580b4b8e8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6e438633-d12a-44b1-b014-279cffb6963d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f1b895b9-520b-4c73-9653-1fa79c8c3661","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-497f21.apps.895c59d4-5776-4983-8d76-ee2580b4b8e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T17:22:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0937a262-6bde-4596-904e-167de3c6465a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T17:22:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0937a262-6bde-4596-904e-167de3c6465a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T17:22:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0937a262-6bde-4596-904e-167de3c6465a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-497f21/auth-test-model-497f21\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-497f21/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T17:22:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0937a262-6bde-4596-904e-167de3c6465a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-18T17:22:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0937a262-6bde-4596-904e-167de3c6465a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-18T17:22:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0937a262-6bde-4596-904e-167de3c6465a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-18T17:22:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0937a262-6bde-4596-904e-167de3c6465a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-18T17:22:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0937a262-6bde-4596-904e-167de3c6465a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-18T17:22:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"93d84115-c60a-4097-a385-f479ed6113e4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:33732","PortSpecifier":{"PortValue":33732}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"93d84115-c60a-4097-a385-f479ed6113e4","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-78538d.apps.895c59d4-5776-4983-8d76-ee2580b4b8e8.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-18T17:22:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"93d84115-c60a-4097-a385-f479ed6113e4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:33732","PortSpecifier":{"PortValue":33732}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784395361,"nanos":873357389},"http":{"id":"93d84115-c60a-4097-a385-f479ed6113e4","method":"POST","headers":{":authority":"e2e-shared-a-78538d.apps.895c59d4-5776-4983-8d76-ee2580b4b8e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T17:22:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"93d84115-c60a-4097-a385-f479ed6113e4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1V3stMKVLzlqjbKTf_lvTrYZsMl81IFkWmcFJW26yUkFybzxZM9AIBlVLWV2Z"} {"level":"debug","ts":"2026-07-18T17:22:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"93d84115-c60a-4097-a385-f479ed6113e4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-78538d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1V3stMKVLzlqjbKTf_lvTrYZsMl81IFkWmcFJW26yUkFybzxZM9AIBlVLWV2Z\"}"} {"level":"debug","ts":"2026-07-18T17:22:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"93d84115-c60a-4097-a385-f479ed6113e4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-78538d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"39eaf6b9-f0b3-42e0-8a70-3b84e57f3e4b","keyName":"e2e-auth-iso-a-085405","subscription":"e2e-auth-iso-05d7e6","tenant":"e2e-shared-a-78538d","userId":"39eaf6b9-f0b3-42e0-8a70-3b84e57f3e4b","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-18T17:22:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"93d84115-c60a-4097-a385-f479ed6113e4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T17:22:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"93d84115-c60a-4097-a385-f479ed6113e4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T17:22:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"93d84115-c60a-4097-a385-f479ed6113e4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T17:22:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"93d84115-c60a-4097-a385-f479ed6113e4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-78538d/auth-test-model-78538d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-78538d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T17:22:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"93d84115-c60a-4097-a385-f479ed6113e4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-18T17:22:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"93d84115-c60a-4097-a385-f479ed6113e4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-18T17:22:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"93d84115-c60a-4097-a385-f479ed6113e4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-18T17:22:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"93d84115-c60a-4097-a385-f479ed6113e4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-05d7e6"} {"level":"info","ts":"2026-07-18T17:22:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"93d84115-c60a-4097-a385-f479ed6113e4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-18T17:22:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"93d84115-c60a-4097-a385-f479ed6113e4","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-18T17:22:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e96002ddfed2da222a5701361fccf65fdcad3bbb3ece51e10c27afabc7c8cdbd"} {"level":"info","ts":"2026-07-18T17:22:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2d8a3bb09f0949758e20b65e6ac48288d66c431dfc0cd57891b4023665c63688"} {"level":"info","ts":"2026-07-18T17:22:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f7c6e52202169abfb9c66eea59436b89614718350af3843b89896249e0fb1edf"} {"level":"info","ts":"2026-07-18T17:22:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/00da27777581d4c8435848043bc93d90a9fc2159cae93fd3893ddfcac5211202"} {"level":"info","ts":"2026-07-18T17:22:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2a9ab313b963f3421438923880d2651275d3e54c297413ae197bb30b0d155ea9"} {"level":"info","ts":"2026-07-18T17:22:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/93e662155ddb1d5ba9f9625b77265386107dc9e61803b9527ace24e56ecf17e5"} {"level":"info","ts":"2026-07-18T17:22:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/04045d64cec25704816b986d84270d9cc09ed87c37b539039aede1bcb1cce748"} {"level":"info","ts":"2026-07-18T17:22:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fab321c815c1ea5b04c8931c45cc73680829c8e9e98307dfc611098ae8e4320b"} {"level":"info","ts":"2026-07-18T17:22:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/84f7fbf20daa8e42cb82d0dbd9c713768e0e64b1c17da612ae1eb2c5742b84c3"} {"level":"info","ts":"2026-07-18T17:22:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4"} {"level":"info","ts":"2026-07-18T17:22:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eeec35435dae4d11ef4448e7497f2507b94c577c6d026a60914fe8dd7dfc631a"} {"level":"info","ts":"2026-07-18T17:22:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/813bb33acaf72d5b3aee3794aa0099156f8a1de4c88ccb544f94bc12f2fb52d2"} {"level":"info","ts":"2026-07-18T17:22:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0947277d3921a4147d7a0a352e2b792c15310cd6b4ab47b7fcc1ee306db8f8a7"} {"level":"info","ts":"2026-07-18T17:22:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0"} {"level":"info","ts":"2026-07-18T17:22:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/057aca8234e4025b2d0d4da0c79c1b55ae32e285c821a2b6e2019f80b79e3281"} {"level":"info","ts":"2026-07-18T17:22:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/175e4cdc26d29960ce6d8bc2fba411fcbffab1591b5450037d0d5fa45b78d0bd"} {"level":"info","ts":"2026-07-18T17:22:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f750141328196ac788f42b6513d38861fec75aecfd4e8f883b5a6cc1e38c4d0b"} {"level":"info","ts":"2026-07-18T17:22:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1a9c2110fcfa199c3617c3b097269a27f803f25f68431221b4114a9ade421080"} {"level":"info","ts":"2026-07-18T17:22:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/27b5982de5f7a0145c8ca1d93255eb98cc1b439cd7e1633d99c61dfcb8c92a91"} {"level":"info","ts":"2026-07-18T17:22:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/426af5106c3ed14e6a9dc7513897388db33d4733f57b8ada8bf0c199a82b82b3"} {"level":"info","ts":"2026-07-18T17:22:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7165f534f691afb40fe63819d7261caf74760aae46c101396be2bc783fc76301"} {"level":"info","ts":"2026-07-18T17:22:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f07b47785ef1c5d102abe4addd918a3e5a525e15723eddee7a61356a98012a34"} {"level":"info","ts":"2026-07-18T17:22:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/18136a7ea3224fd4fe8d635f843eeb7edcb7aef1c349914ac7d6844a9ff43eff"} {"level":"info","ts":"2026-07-18T17:22:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/015c9cc290ecdf7de3c9b108b2aaa2d0b8827bc03e39b8977906d9b41479d386"} {"level":"debug","ts":"2026-07-18T17:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86d39625ca338ecb8918bb786c949b4b1855b4922bdd330a29b1150c3099a6c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:24:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:24:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86d39625ca338ecb8918bb786c949b4b1855b4922bdd330a29b1150c3099a6c4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86d39625ca338ecb8918bb786c949b4b1855b4922bdd330a29b1150c3099a6c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:24:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:24:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86d39625ca338ecb8918bb786c949b4b1855b4922bdd330a29b1150c3099a6c4"} {"level":"info","ts":"2026-07-18T17:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86d39625ca338ecb8918bb786c949b4b1855b4922bdd330a29b1150c3099a6c4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86d39625ca338ecb8918bb786c949b4b1855b4922bdd330a29b1150c3099a6c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:24:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:24:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-18T17:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"86d39625ca338ecb8918bb786c949b4b1855b4922bdd330a29b1150c3099a6c4","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"86d39625ca338ecb8918bb786c949b4b1855b4922bdd330a29b1150c3099a6c4\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-18T17:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86d39625ca338ecb8918bb786c949b4b1855b4922bdd330a29b1150c3099a6c4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T17:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86d39625ca338ecb8918bb786c949b4b1855b4922bdd330a29b1150c3099a6c4"} {"level":"debug","ts":"2026-07-18T17:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86d39625ca338ecb8918bb786c949b4b1855b4922bdd330a29b1150c3099a6c4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T17:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86d39625ca338ecb8918bb786c949b4b1855b4922bdd330a29b1150c3099a6c4"} {"level":"debug","ts":"2026-07-18T17:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86d39625ca338ecb8918bb786c949b4b1855b4922bdd330a29b1150c3099a6c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:24:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:24:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["86d39625ca338ecb8918bb786c949b4b1855b4922bdd330a29b1150c3099a6c4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86d39625ca338ecb8918bb786c949b4b1855b4922bdd330a29b1150c3099a6c4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86d39625ca338ecb8918bb786c949b4b1855b4922bdd330a29b1150c3099a6c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:24:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:24:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86d39625ca338ecb8918bb786c949b4b1855b4922bdd330a29b1150c3099a6c4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86d39625ca338ecb8918bb786c949b4b1855b4922bdd330a29b1150c3099a6c4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86d39625ca338ecb8918bb786c949b4b1855b4922bdd330a29b1150c3099a6c4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T17:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86d39625ca338ecb8918bb786c949b4b1855b4922bdd330a29b1150c3099a6c4"} {"level":"debug","ts":"2026-07-18T17:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86d39625ca338ecb8918bb786c949b4b1855b4922bdd330a29b1150c3099a6c4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T17:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86d39625ca338ecb8918bb786c949b4b1855b4922bdd330a29b1150c3099a6c4"} {"level":"debug","ts":"2026-07-18T17:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86d39625ca338ecb8918bb786c949b4b1855b4922bdd330a29b1150c3099a6c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:24:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:24:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["86d39625ca338ecb8918bb786c949b4b1855b4922bdd330a29b1150c3099a6c4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86d39625ca338ecb8918bb786c949b4b1855b4922bdd330a29b1150c3099a6c4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86d39625ca338ecb8918bb786c949b4b1855b4922bdd330a29b1150c3099a6c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:24:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:24:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86d39625ca338ecb8918bb786c949b4b1855b4922bdd330a29b1150c3099a6c4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86d39625ca338ecb8918bb786c949b4b1855b4922bdd330a29b1150c3099a6c4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86d39625ca338ecb8918bb786c949b4b1855b4922bdd330a29b1150c3099a6c4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T17:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86d39625ca338ecb8918bb786c949b4b1855b4922bdd330a29b1150c3099a6c4"} {"level":"debug","ts":"2026-07-18T17:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86d39625ca338ecb8918bb786c949b4b1855b4922bdd330a29b1150c3099a6c4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a89e498b1a0238180adfd7933935d4a23625d79f7fd777c6d44b54556f5ba26c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:24:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:24:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a89e498b1a0238180adfd7933935d4a23625d79f7fd777c6d44b54556f5ba26c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a89e498b1a0238180adfd7933935d4a23625d79f7fd777c6d44b54556f5ba26c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a89e498b1a0238180adfd7933935d4a23625d79f7fd777c6d44b54556f5ba26c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T17:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86d39625ca338ecb8918bb786c949b4b1855b4922bdd330a29b1150c3099a6c4"} {"level":"debug","ts":"2026-07-18T17:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86d39625ca338ecb8918bb786c949b4b1855b4922bdd330a29b1150c3099a6c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:24:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:24:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["86d39625ca338ecb8918bb786c949b4b1855b4922bdd330a29b1150c3099a6c4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86d39625ca338ecb8918bb786c949b4b1855b4922bdd330a29b1150c3099a6c4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a89e498b1a0238180adfd7933935d4a23625d79f7fd777c6d44b54556f5ba26c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:24:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:24:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a89e498b1a0238180adfd7933935d4a23625d79f7fd777c6d44b54556f5ba26c"} {"level":"info","ts":"2026-07-18T17:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a89e498b1a0238180adfd7933935d4a23625d79f7fd777c6d44b54556f5ba26c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86d39625ca338ecb8918bb786c949b4b1855b4922bdd330a29b1150c3099a6c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:24:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:24:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86d39625ca338ecb8918bb786c949b4b1855b4922bdd330a29b1150c3099a6c4"} {"level":"info","ts":"2026-07-18T17:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86d39625ca338ecb8918bb786c949b4b1855b4922bdd330a29b1150c3099a6c4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a89e498b1a0238180adfd7933935d4a23625d79f7fd777c6d44b54556f5ba26c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86d39625ca338ecb8918bb786c949b4b1855b4922bdd330a29b1150c3099a6c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:24:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:24:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["86d39625ca338ecb8918bb786c949b4b1855b4922bdd330a29b1150c3099a6c4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86d39625ca338ecb8918bb786c949b4b1855b4922bdd330a29b1150c3099a6c4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86d39625ca338ecb8918bb786c949b4b1855b4922bdd330a29b1150c3099a6c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:24:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:24:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["86d39625ca338ecb8918bb786c949b4b1855b4922bdd330a29b1150c3099a6c4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-18T17:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"86d39625ca338ecb8918bb786c949b4b1855b4922bdd330a29b1150c3099a6c4","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"86d39625ca338ecb8918bb786c949b4b1855b4922bdd330a29b1150c3099a6c4\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-18T17:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86d39625ca338ecb8918bb786c949b4b1855b4922bdd330a29b1150c3099a6c4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T17:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a89e498b1a0238180adfd7933935d4a23625d79f7fd777c6d44b54556f5ba26c"} {"level":"debug","ts":"2026-07-18T17:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86d39625ca338ecb8918bb786c949b4b1855b4922bdd330a29b1150c3099a6c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:24:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:24:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86d39625ca338ecb8918bb786c949b4b1855b4922bdd330a29b1150c3099a6c4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a89e498b1a0238180adfd7933935d4a23625d79f7fd777c6d44b54556f5ba26c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:24:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:24:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a89e498b1a0238180adfd7933935d4a23625d79f7fd777c6d44b54556f5ba26c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86d39625ca338ecb8918bb786c949b4b1855b4922bdd330a29b1150c3099a6c4"} {"level":"info","ts":"2026-07-18T17:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8fe1f0074091d4476c9d0cdef210c678dea2850cddb9b5b0e0405256b63a46a"} {"level":"info","ts":"2026-07-18T17:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a89e498b1a0238180adfd7933935d4a23625d79f7fd777c6d44b54556f5ba26c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b8fe1f0074091d4476c9d0cdef210c678dea2850cddb9b5b0e0405256b63a46a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:24:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:24:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b8fe1f0074091d4476c9d0cdef210c678dea2850cddb9b5b0e0405256b63a46a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86d39625ca338ecb8918bb786c949b4b1855b4922bdd330a29b1150c3099a6c4"} {"level":"info","ts":"2026-07-18T17:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b8fe1f0074091d4476c9d0cdef210c678dea2850cddb9b5b0e0405256b63a46a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86d39625ca338ecb8918bb786c949b4b1855b4922bdd330a29b1150c3099a6c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:24:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:24:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["86d39625ca338ecb8918bb786c949b4b1855b4922bdd330a29b1150c3099a6c4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a89e498b1a0238180adfd7933935d4a23625d79f7fd777c6d44b54556f5ba26c"} {"level":"info","ts":"2026-07-18T17:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86d39625ca338ecb8918bb786c949b4b1855b4922bdd330a29b1150c3099a6c4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a89e498b1a0238180adfd7933935d4a23625d79f7fd777c6d44b54556f5ba26c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b8fe1f0074091d4476c9d0cdef210c678dea2850cddb9b5b0e0405256b63a46a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:24:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:24:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8fe1f0074091d4476c9d0cdef210c678dea2850cddb9b5b0e0405256b63a46a"} {"level":"info","ts":"2026-07-18T17:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b8fe1f0074091d4476c9d0cdef210c678dea2850cddb9b5b0e0405256b63a46a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86d39625ca338ecb8918bb786c949b4b1855b4922bdd330a29b1150c3099a6c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:24:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:24:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86d39625ca338ecb8918bb786c949b4b1855b4922bdd330a29b1150c3099a6c4"} {"level":"info","ts":"2026-07-18T17:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86d39625ca338ecb8918bb786c949b4b1855b4922bdd330a29b1150c3099a6c4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00da27777581d4c8435848043bc93d90a9fc2159cae93fd3893ddfcac5211202","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:24:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:24:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00da27777581d4c8435848043bc93d90a9fc2159cae93fd3893ddfcac5211202","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b8fe1f0074091d4476c9d0cdef210c678dea2850cddb9b5b0e0405256b63a46a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:24:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:24:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b8fe1f0074091d4476c9d0cdef210c678dea2850cddb9b5b0e0405256b63a46a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00da27777581d4c8435848043bc93d90a9fc2159cae93fd3893ddfcac5211202"} {"level":"info","ts":"2026-07-18T17:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b8fe1f0074091d4476c9d0cdef210c678dea2850cddb9b5b0e0405256b63a46a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86d39625ca338ecb8918bb786c949b4b1855b4922bdd330a29b1150c3099a6c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:24:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:24:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["86d39625ca338ecb8918bb786c949b4b1855b4922bdd330a29b1150c3099a6c4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8fe1f0074091d4476c9d0cdef210c678dea2850cddb9b5b0e0405256b63a46a"} {"level":"info","ts":"2026-07-18T17:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86d39625ca338ecb8918bb786c949b4b1855b4922bdd330a29b1150c3099a6c4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00da27777581d4c8435848043bc93d90a9fc2159cae93fd3893ddfcac5211202","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:24:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:24:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["00da27777581d4c8435848043bc93d90a9fc2159cae93fd3893ddfcac5211202"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00da27777581d4c8435848043bc93d90a9fc2159cae93fd3893ddfcac5211202","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b8fe1f0074091d4476c9d0cdef210c678dea2850cddb9b5b0e0405256b63a46a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86d39625ca338ecb8918bb786c949b4b1855b4922bdd330a29b1150c3099a6c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:24:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:24:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86d39625ca338ecb8918bb786c949b4b1855b4922bdd330a29b1150c3099a6c4"} {"level":"info","ts":"2026-07-18T17:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86d39625ca338ecb8918bb786c949b4b1855b4922bdd330a29b1150c3099a6c4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18136a7ea3224fd4fe8d635f843eeb7edcb7aef1c349914ac7d6844a9ff43eff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:24:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:24:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00da27777581d4c8435848043bc93d90a9fc2159cae93fd3893ddfcac5211202"} {"level":"info","ts":"2026-07-18T17:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18136a7ea3224fd4fe8d635f843eeb7edcb7aef1c349914ac7d6844a9ff43eff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00da27777581d4c8435848043bc93d90a9fc2159cae93fd3893ddfcac5211202","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86d39625ca338ecb8918bb786c949b4b1855b4922bdd330a29b1150c3099a6c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:24:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:24:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["86d39625ca338ecb8918bb786c949b4b1855b4922bdd330a29b1150c3099a6c4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86d39625ca338ecb8918bb786c949b4b1855b4922bdd330a29b1150c3099a6c4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18136a7ea3224fd4fe8d635f843eeb7edcb7aef1c349914ac7d6844a9ff43eff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86d39625ca338ecb8918bb786c949b4b1855b4922bdd330a29b1150c3099a6c4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T17:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8fe1f0074091d4476c9d0cdef210c678dea2850cddb9b5b0e0405256b63a46a"} {"level":"debug","ts":"2026-07-18T17:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18136a7ea3224fd4fe8d635f843eeb7edcb7aef1c349914ac7d6844a9ff43eff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:24:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:24:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18136a7ea3224fd4fe8d635f843eeb7edcb7aef1c349914ac7d6844a9ff43eff","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T17:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18136a7ea3224fd4fe8d635f843eeb7edcb7aef1c349914ac7d6844a9ff43eff"} {"level":"debug","ts":"2026-07-18T17:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18136a7ea3224fd4fe8d635f843eeb7edcb7aef1c349914ac7d6844a9ff43eff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:24:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:24:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18136a7ea3224fd4fe8d635f843eeb7edcb7aef1c349914ac7d6844a9ff43eff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18136a7ea3224fd4fe8d635f843eeb7edcb7aef1c349914ac7d6844a9ff43eff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18136a7ea3224fd4fe8d635f843eeb7edcb7aef1c349914ac7d6844a9ff43eff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18136a7ea3224fd4fe8d635f843eeb7edcb7aef1c349914ac7d6844a9ff43eff","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T17:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86d39625ca338ecb8918bb786c949b4b1855b4922bdd330a29b1150c3099a6c4"} {"level":"info","ts":"2026-07-18T17:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18136a7ea3224fd4fe8d635f843eeb7edcb7aef1c349914ac7d6844a9ff43eff"} {"level":"debug","ts":"2026-07-18T17:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"396f2ac7e57e386353ac14e93e44bf55ebaa23c330ef08bbf9bae423c9acbaa3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:24:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:24:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"396f2ac7e57e386353ac14e93e44bf55ebaa23c330ef08bbf9bae423c9acbaa3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"396f2ac7e57e386353ac14e93e44bf55ebaa23c330ef08bbf9bae423c9acbaa3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:24:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:24:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/396f2ac7e57e386353ac14e93e44bf55ebaa23c330ef08bbf9bae423c9acbaa3"} {"level":"info","ts":"2026-07-18T17:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"396f2ac7e57e386353ac14e93e44bf55ebaa23c330ef08bbf9bae423c9acbaa3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"396f2ac7e57e386353ac14e93e44bf55ebaa23c330ef08bbf9bae423c9acbaa3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:24:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:24:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-18T17:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"396f2ac7e57e386353ac14e93e44bf55ebaa23c330ef08bbf9bae423c9acbaa3","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"396f2ac7e57e386353ac14e93e44bf55ebaa23c330ef08bbf9bae423c9acbaa3\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-18T17:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"396f2ac7e57e386353ac14e93e44bf55ebaa23c330ef08bbf9bae423c9acbaa3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"396f2ac7e57e386353ac14e93e44bf55ebaa23c330ef08bbf9bae423c9acbaa3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T17:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/396f2ac7e57e386353ac14e93e44bf55ebaa23c330ef08bbf9bae423c9acbaa3"} {"level":"info","ts":"2026-07-18T17:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/396f2ac7e57e386353ac14e93e44bf55ebaa23c330ef08bbf9bae423c9acbaa3"} {"level":"debug","ts":"2026-07-18T17:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:24:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:24:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aaa8461f25ffb323f1e10b382f6de0e52765d1698b8e96dcb8be38be15f055f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:24:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:24:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0"} {"level":"info","ts":"2026-07-18T17:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aaa8461f25ffb323f1e10b382f6de0e52765d1698b8e96dcb8be38be15f055f2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:24:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:24:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aaa8461f25ffb323f1e10b382f6de0e52765d1698b8e96dcb8be38be15f055f2"} {"level":"info","ts":"2026-07-18T17:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"396f2ac7e57e386353ac14e93e44bf55ebaa23c330ef08bbf9bae423c9acbaa3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:24:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:24:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["396f2ac7e57e386353ac14e93e44bf55ebaa23c330ef08bbf9bae423c9acbaa3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"396f2ac7e57e386353ac14e93e44bf55ebaa23c330ef08bbf9bae423c9acbaa3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aaa8461f25ffb323f1e10b382f6de0e52765d1698b8e96dcb8be38be15f055f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:24:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:24:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aaa8461f25ffb323f1e10b382f6de0e52765d1698b8e96dcb8be38be15f055f2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0"} {"level":"info","ts":"2026-07-18T17:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aaa8461f25ffb323f1e10b382f6de0e52765d1698b8e96dcb8be38be15f055f2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"396f2ac7e57e386353ac14e93e44bf55ebaa23c330ef08bbf9bae423c9acbaa3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aaa8461f25ffb323f1e10b382f6de0e52765d1698b8e96dcb8be38be15f055f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:24:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:24:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aaa8461f25ffb323f1e10b382f6de0e52765d1698b8e96dcb8be38be15f055f2"} {"level":"info","ts":"2026-07-18T17:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aaa8461f25ffb323f1e10b382f6de0e52765d1698b8e96dcb8be38be15f055f2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aaa8461f25ffb323f1e10b382f6de0e52765d1698b8e96dcb8be38be15f055f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:24:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:24:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aaa8461f25ffb323f1e10b382f6de0e52765d1698b8e96dcb8be38be15f055f2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/396f2ac7e57e386353ac14e93e44bf55ebaa23c330ef08bbf9bae423c9acbaa3"} {"level":"info","ts":"2026-07-18T17:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aaa8461f25ffb323f1e10b382f6de0e52765d1698b8e96dcb8be38be15f055f2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aaa8461f25ffb323f1e10b382f6de0e52765d1698b8e96dcb8be38be15f055f2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f16474fc63eee461fd57a552fa9b8d6ea39b61825fd637fd55ab392846ecfb77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:24:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:24:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0"} {"level":"info","ts":"2026-07-18T17:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f16474fc63eee461fd57a552fa9b8d6ea39b61825fd637fd55ab392846ecfb77","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f16474fc63eee461fd57a552fa9b8d6ea39b61825fd637fd55ab392846ecfb77","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f16474fc63eee461fd57a552fa9b8d6ea39b61825fd637fd55ab392846ecfb77","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T17:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aaa8461f25ffb323f1e10b382f6de0e52765d1698b8e96dcb8be38be15f055f2"} {"level":"debug","ts":"2026-07-18T17:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f16474fc63eee461fd57a552fa9b8d6ea39b61825fd637fd55ab392846ecfb77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:24:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:24:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f16474fc63eee461fd57a552fa9b8d6ea39b61825fd637fd55ab392846ecfb77","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T17:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f16474fc63eee461fd57a552fa9b8d6ea39b61825fd637fd55ab392846ecfb77"} {"level":"debug","ts":"2026-07-18T17:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f16474fc63eee461fd57a552fa9b8d6ea39b61825fd637fd55ab392846ecfb77","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T17:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f16474fc63eee461fd57a552fa9b8d6ea39b61825fd637fd55ab392846ecfb77"} {"level":"debug","ts":"2026-07-18T17:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f16474fc63eee461fd57a552fa9b8d6ea39b61825fd637fd55ab392846ecfb77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:24:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:24:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f16474fc63eee461fd57a552fa9b8d6ea39b61825fd637fd55ab392846ecfb77"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f16474fc63eee461fd57a552fa9b8d6ea39b61825fd637fd55ab392846ecfb77","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a308c06619b88014342d5e31c2fdd5bc331c96f7224f5f9d50bc0fb194f6a8ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:24:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:24:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a308c06619b88014342d5e31c2fdd5bc331c96f7224f5f9d50bc0fb194f6a8ce"} {"level":"info","ts":"2026-07-18T17:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a308c06619b88014342d5e31c2fdd5bc331c96f7224f5f9d50bc0fb194f6a8ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f16474fc63eee461fd57a552fa9b8d6ea39b61825fd637fd55ab392846ecfb77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:24:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:24:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f16474fc63eee461fd57a552fa9b8d6ea39b61825fd637fd55ab392846ecfb77","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a308c06619b88014342d5e31c2fdd5bc331c96f7224f5f9d50bc0fb194f6a8ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:24:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:24:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a308c06619b88014342d5e31c2fdd5bc331c96f7224f5f9d50bc0fb194f6a8ce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f16474fc63eee461fd57a552fa9b8d6ea39b61825fd637fd55ab392846ecfb77"} {"level":"info","ts":"2026-07-18T17:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a308c06619b88014342d5e31c2fdd5bc331c96f7224f5f9d50bc0fb194f6a8ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f16474fc63eee461fd57a552fa9b8d6ea39b61825fd637fd55ab392846ecfb77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:24:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:24:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f16474fc63eee461fd57a552fa9b8d6ea39b61825fd637fd55ab392846ecfb77"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f16474fc63eee461fd57a552fa9b8d6ea39b61825fd637fd55ab392846ecfb77","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a308c06619b88014342d5e31c2fdd5bc331c96f7224f5f9d50bc0fb194f6a8ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:24:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:24:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a308c06619b88014342d5e31c2fdd5bc331c96f7224f5f9d50bc0fb194f6a8ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f16474fc63eee461fd57a552fa9b8d6ea39b61825fd637fd55ab392846ecfb77","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a308c06619b88014342d5e31c2fdd5bc331c96f7224f5f9d50bc0fb194f6a8ce","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T17:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a308c06619b88014342d5e31c2fdd5bc331c96f7224f5f9d50bc0fb194f6a8ce"} {"level":"debug","ts":"2026-07-18T17:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a308c06619b88014342d5e31c2fdd5bc331c96f7224f5f9d50bc0fb194f6a8ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:24:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:24:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a308c06619b88014342d5e31c2fdd5bc331c96f7224f5f9d50bc0fb194f6a8ce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a308c06619b88014342d5e31c2fdd5bc331c96f7224f5f9d50bc0fb194f6a8ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:24:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:24:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a308c06619b88014342d5e31c2fdd5bc331c96f7224f5f9d50bc0fb194f6a8ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17116ee24609288803998c6c7286129dd64bebc047c9d29f431211684e283625","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:24:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:24:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f16474fc63eee461fd57a552fa9b8d6ea39b61825fd637fd55ab392846ecfb77"} {"level":"info","ts":"2026-07-18T17:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17116ee24609288803998c6c7286129dd64bebc047c9d29f431211684e283625","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eeec35435dae4d11ef4448e7497f2507b94c577c6d026a60914fe8dd7dfc631a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:24:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:24:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eeec35435dae4d11ef4448e7497f2507b94c577c6d026a60914fe8dd7dfc631a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"17116ee24609288803998c6c7286129dd64bebc047c9d29f431211684e283625","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77adaddda22bbd4b3708a1080d8f15186449d207733819b59acbd9fc046e5aa0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:24:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:24:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a308c06619b88014342d5e31c2fdd5bc331c96f7224f5f9d50bc0fb194f6a8ce"} {"level":"info","ts":"2026-07-18T17:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77adaddda22bbd4b3708a1080d8f15186449d207733819b59acbd9fc046e5aa0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:24:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:24:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4"} {"level":"info","ts":"2026-07-18T17:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eeec35435dae4d11ef4448e7497f2507b94c577c6d026a60914fe8dd7dfc631a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17116ee24609288803998c6c7286129dd64bebc047c9d29f431211684e283625","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:24:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:24:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17116ee24609288803998c6c7286129dd64bebc047c9d29f431211684e283625"} {"level":"info","ts":"2026-07-18T17:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17116ee24609288803998c6c7286129dd64bebc047c9d29f431211684e283625","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77adaddda22bbd4b3708a1080d8f15186449d207733819b59acbd9fc046e5aa0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:24:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:24:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eeec35435dae4d11ef4448e7497f2507b94c577c6d026a60914fe8dd7dfc631a"} {"level":"info","ts":"2026-07-18T17:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eeec35435dae4d11ef4448e7497f2507b94c577c6d026a60914fe8dd7dfc631a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:24:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:24:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eeec35435dae4d11ef4448e7497f2507b94c577c6d026a60914fe8dd7dfc631a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eeec35435dae4d11ef4448e7497f2507b94c577c6d026a60914fe8dd7dfc631a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"015c9cc290ecdf7de3c9b108b2aaa2d0b8827bc03e39b8977906d9b41479d386","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:24:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:24:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77adaddda22bbd4b3708a1080d8f15186449d207733819b59acbd9fc046e5aa0"} {"level":"info","ts":"2026-07-18T17:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"015c9cc290ecdf7de3c9b108b2aaa2d0b8827bc03e39b8977906d9b41479d386","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17116ee24609288803998c6c7286129dd64bebc047c9d29f431211684e283625","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:24:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:24:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["17116ee24609288803998c6c7286129dd64bebc047c9d29f431211684e283625"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4"} {"level":"info","ts":"2026-07-18T17:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17116ee24609288803998c6c7286129dd64bebc047c9d29f431211684e283625","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77adaddda22bbd4b3708a1080d8f15186449d207733819b59acbd9fc046e5aa0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:24:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:24:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["77adaddda22bbd4b3708a1080d8f15186449d207733819b59acbd9fc046e5aa0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/015c9cc290ecdf7de3c9b108b2aaa2d0b8827bc03e39b8977906d9b41479d386"} {"level":"info","ts":"2026-07-18T17:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17116ee24609288803998c6c7286129dd64bebc047c9d29f431211684e283625"} {"level":"info","ts":"2026-07-18T17:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77adaddda22bbd4b3708a1080d8f15186449d207733819b59acbd9fc046e5aa0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f750141328196ac788f42b6513d38861fec75aecfd4e8f883b5a6cc1e38c4d0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:24:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:24:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f750141328196ac788f42b6513d38861fec75aecfd4e8f883b5a6cc1e38c4d0b"} {"level":"info","ts":"2026-07-18T17:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c014f029bd221da15ec954a4f5a0f69aba5b7d1216507787b6905ef731ff215"} {"level":"info","ts":"2026-07-18T17:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eeec35435dae4d11ef4448e7497f2507b94c577c6d026a60914fe8dd7dfc631a"} {"level":"info","ts":"2026-07-18T17:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f750141328196ac788f42b6513d38861fec75aecfd4e8f883b5a6cc1e38c4d0b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c014f029bd221da15ec954a4f5a0f69aba5b7d1216507787b6905ef731ff215","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:24:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:24:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0c014f029bd221da15ec954a4f5a0f69aba5b7d1216507787b6905ef731ff215"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/204688c86718d36be4c020b69aef1496396eb1a0cb425f719468b2f9d613f8be"} {"level":"info","ts":"2026-07-18T17:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41d5f22e86e31b445a00fc9e48d273ce757f7dfe5d37d5f39725e3b256badbfe"} {"level":"info","ts":"2026-07-18T17:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c014f029bd221da15ec954a4f5a0f69aba5b7d1216507787b6905ef731ff215","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eeec35435dae4d11ef4448e7497f2507b94c577c6d026a60914fe8dd7dfc631a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"204688c86718d36be4c020b69aef1496396eb1a0cb425f719468b2f9d613f8be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:24:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:24:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["204688c86718d36be4c020b69aef1496396eb1a0cb425f719468b2f9d613f8be"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77adaddda22bbd4b3708a1080d8f15186449d207733819b59acbd9fc046e5aa0"} {"level":"info","ts":"2026-07-18T17:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f750141328196ac788f42b6513d38861fec75aecfd4e8f883b5a6cc1e38c4d0b"} {"level":"info","ts":"2026-07-18T17:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c014f029bd221da15ec954a4f5a0f69aba5b7d1216507787b6905ef731ff215"} {"level":"info","ts":"2026-07-18T17:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"204688c86718d36be4c020b69aef1496396eb1a0cb425f719468b2f9d613f8be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"015c9cc290ecdf7de3c9b108b2aaa2d0b8827bc03e39b8977906d9b41479d386","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:24:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:24:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["015c9cc290ecdf7de3c9b108b2aaa2d0b8827bc03e39b8977906d9b41479d386"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/204688c86718d36be4c020b69aef1496396eb1a0cb425f719468b2f9d613f8be"} {"level":"info","ts":"2026-07-18T17:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"015c9cc290ecdf7de3c9b108b2aaa2d0b8827bc03e39b8977906d9b41479d386","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"17116ee24609288803998c6c7286129dd64bebc047c9d29f431211684e283625","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41d5f22e86e31b445a00fc9e48d273ce757f7dfe5d37d5f39725e3b256badbfe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:24:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:24:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["41d5f22e86e31b445a00fc9e48d273ce757f7dfe5d37d5f39725e3b256badbfe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42e282d5a644cba50a26757fee2bd85faafd4b2f4a8daba4f1edb86171fc174e"} {"level":"info","ts":"2026-07-18T17:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/067d4eb0919195807c996cd7d2a1d2c436fb60d6b843fc649b7ec5097a591ac2"} {"level":"info","ts":"2026-07-18T17:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/015c9cc290ecdf7de3c9b108b2aaa2d0b8827bc03e39b8977906d9b41479d386"} {"level":"info","ts":"2026-07-18T17:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41d5f22e86e31b445a00fc9e48d273ce757f7dfe5d37d5f39725e3b256badbfe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77adaddda22bbd4b3708a1080d8f15186449d207733819b59acbd9fc046e5aa0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f750141328196ac788f42b6513d38861fec75aecfd4e8f883b5a6cc1e38c4d0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:24:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:24:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f750141328196ac788f42b6513d38861fec75aecfd4e8f883b5a6cc1e38c4d0b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41d5f22e86e31b445a00fc9e48d273ce757f7dfe5d37d5f39725e3b256badbfe"} {"level":"info","ts":"2026-07-18T17:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f750141328196ac788f42b6513d38861fec75aecfd4e8f883b5a6cc1e38c4d0b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T17:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f8b553bff07f64cf5c066e5b917e725877c25113999fed20ae0b032df5c7271"} {"level":"debug","ts":"2026-07-18T17:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0c014f029bd221da15ec954a4f5a0f69aba5b7d1216507787b6905ef731ff215","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"204688c86718d36be4c020b69aef1496396eb1a0cb425f719468b2f9d613f8be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42e282d5a644cba50a26757fee2bd85faafd4b2f4a8daba4f1edb86171fc174e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:24:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:24:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["42e282d5a644cba50a26757fee2bd85faafd4b2f4a8daba4f1edb86171fc174e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/175e4cdc26d29960ce6d8bc2fba411fcbffab1591b5450037d0d5fa45b78d0bd"} {"level":"info","ts":"2026-07-18T17:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f750141328196ac788f42b6513d38861fec75aecfd4e8f883b5a6cc1e38c4d0b"} {"level":"info","ts":"2026-07-18T17:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42e282d5a644cba50a26757fee2bd85faafd4b2f4a8daba4f1edb86171fc174e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"067d4eb0919195807c996cd7d2a1d2c436fb60d6b843fc649b7ec5097a591ac2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:24:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:24:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["067d4eb0919195807c996cd7d2a1d2c436fb60d6b843fc649b7ec5097a591ac2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00cc40fc42e5ca46b4aef101e22ec2455e872b0eb6b6821b18ae0c3e69a75472"} {"level":"info","ts":"2026-07-18T17:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42e282d5a644cba50a26757fee2bd85faafd4b2f4a8daba4f1edb86171fc174e"} {"level":"info","ts":"2026-07-18T17:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"067d4eb0919195807c996cd7d2a1d2c436fb60d6b843fc649b7ec5097a591ac2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"015c9cc290ecdf7de3c9b108b2aaa2d0b8827bc03e39b8977906d9b41479d386","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"41d5f22e86e31b445a00fc9e48d273ce757f7dfe5d37d5f39725e3b256badbfe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f8b553bff07f64cf5c066e5b917e725877c25113999fed20ae0b032df5c7271","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:24:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:24:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4f8b553bff07f64cf5c066e5b917e725877c25113999fed20ae0b032df5c7271"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/067d4eb0919195807c996cd7d2a1d2c436fb60d6b843fc649b7ec5097a591ac2"} {"level":"info","ts":"2026-07-18T17:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f8b553bff07f64cf5c066e5b917e725877c25113999fed20ae0b032df5c7271","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"175e4cdc26d29960ce6d8bc2fba411fcbffab1591b5450037d0d5fa45b78d0bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:24:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:24:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["175e4cdc26d29960ce6d8bc2fba411fcbffab1591b5450037d0d5fa45b78d0bd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f8b553bff07f64cf5c066e5b917e725877c25113999fed20ae0b032df5c7271"} {"level":"info","ts":"2026-07-18T17:24:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"175e4cdc26d29960ce6d8bc2fba411fcbffab1591b5450037d0d5fa45b78d0bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f750141328196ac788f42b6513d38861fec75aecfd4e8f883b5a6cc1e38c4d0b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00cc40fc42e5ca46b4aef101e22ec2455e872b0eb6b6821b18ae0c3e69a75472","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:24:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:24:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["00cc40fc42e5ca46b4aef101e22ec2455e872b0eb6b6821b18ae0c3e69a75472"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/175e4cdc26d29960ce6d8bc2fba411fcbffab1591b5450037d0d5fa45b78d0bd"} {"level":"info","ts":"2026-07-18T17:24:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00cc40fc42e5ca46b4aef101e22ec2455e872b0eb6b6821b18ae0c3e69a75472","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42e282d5a644cba50a26757fee2bd85faafd4b2f4a8daba4f1edb86171fc174e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"067d4eb0919195807c996cd7d2a1d2c436fb60d6b843fc649b7ec5097a591ac2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f8b553bff07f64cf5c066e5b917e725877c25113999fed20ae0b032df5c7271","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"175e4cdc26d29960ce6d8bc2fba411fcbffab1591b5450037d0d5fa45b78d0bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00cc40fc42e5ca46b4aef101e22ec2455e872b0eb6b6821b18ae0c3e69a75472","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:24:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:24:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00cc40fc42e5ca46b4aef101e22ec2455e872b0eb6b6821b18ae0c3e69a75472"} {"level":"info","ts":"2026-07-18T17:24:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00cc40fc42e5ca46b4aef101e22ec2455e872b0eb6b6821b18ae0c3e69a75472","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00cc40fc42e5ca46b4aef101e22ec2455e872b0eb6b6821b18ae0c3e69a75472","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00cc40fc42e5ca46b4aef101e22ec2455e872b0eb6b6821b18ae0c3e69a75472","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T17:24:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00cc40fc42e5ca46b4aef101e22ec2455e872b0eb6b6821b18ae0c3e69a75472"} {"level":"debug","ts":"2026-07-18T17:24:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00cc40fc42e5ca46b4aef101e22ec2455e872b0eb6b6821b18ae0c3e69a75472","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:24:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:24:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["00cc40fc42e5ca46b4aef101e22ec2455e872b0eb6b6821b18ae0c3e69a75472"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00cc40fc42e5ca46b4aef101e22ec2455e872b0eb6b6821b18ae0c3e69a75472","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00cc40fc42e5ca46b4aef101e22ec2455e872b0eb6b6821b18ae0c3e69a75472","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:24:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:24:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00cc40fc42e5ca46b4aef101e22ec2455e872b0eb6b6821b18ae0c3e69a75472"} {"level":"info","ts":"2026-07-18T17:24:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00cc40fc42e5ca46b4aef101e22ec2455e872b0eb6b6821b18ae0c3e69a75472","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00cc40fc42e5ca46b4aef101e22ec2455e872b0eb6b6821b18ae0c3e69a75472","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:24:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:24:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["00cc40fc42e5ca46b4aef101e22ec2455e872b0eb6b6821b18ae0c3e69a75472"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00cc40fc42e5ca46b4aef101e22ec2455e872b0eb6b6821b18ae0c3e69a75472"} {"level":"info","ts":"2026-07-18T17:24:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00cc40fc42e5ca46b4aef101e22ec2455e872b0eb6b6821b18ae0c3e69a75472","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00cc40fc42e5ca46b4aef101e22ec2455e872b0eb6b6821b18ae0c3e69a75472","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:24:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:24:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["00cc40fc42e5ca46b4aef101e22ec2455e872b0eb6b6821b18ae0c3e69a75472"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00cc40fc42e5ca46b4aef101e22ec2455e872b0eb6b6821b18ae0c3e69a75472"} {"level":"error","ts":"2026-07-18T17:24:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"00cc40fc42e5ca46b4aef101e22ec2455e872b0eb6b6821b18ae0c3e69a75472","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"00cc40fc42e5ca46b4aef101e22ec2455e872b0eb6b6821b18ae0c3e69a75472\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-18T17:24:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00cc40fc42e5ca46b4aef101e22ec2455e872b0eb6b6821b18ae0c3e69a75472","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00cc40fc42e5ca46b4aef101e22ec2455e872b0eb6b6821b18ae0c3e69a75472","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T17:24:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7380eaa0-5ebd-4475-b3f0-da269a9c803f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:45238","PortSpecifier":{"PortValue":45238}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7380eaa0-5ebd-4475-b3f0-da269a9c803f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-78538d.apps.895c59d4-5776-4983-8d76-ee2580b4b8e8.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-18T17:24:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7380eaa0-5ebd-4475-b3f0-da269a9c803f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:45238","PortSpecifier":{"PortValue":45238}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784395451,"nanos":773281424},"http":{"id":"7380eaa0-5ebd-4475-b3f0-da269a9c803f","method":"POST","headers":{":authority":"e2e-shared-a-78538d.apps.895c59d4-5776-4983-8d76-ee2580b4b8e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T17:24:11Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7380eaa0-5ebd-4475-b3f0-da269a9c803f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-18T17:24:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7380eaa0-5ebd-4475-b3f0-da269a9c803f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f1b895b9-520b-4c73-9653-1fa79c8c3661","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6e438633-d12a-44b1-b014-279cffb6963d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ee2580b4b8e8"]}} {"level":"debug","ts":"2026-07-18T17:24:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7380eaa0-5ebd-4475-b3f0-da269a9c803f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ee2580b4b8e8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6e438633-d12a-44b1-b014-279cffb6963d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f1b895b9-520b-4c73-9653-1fa79c8c3661","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"175e4cdc26d29960ce6d8bc2fba411fcbffab1591b5450037d0d5fa45b78d0bd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-78538d.apps.895c59d4-5776-4983-8d76-ee2580b4b8e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T17:24:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7380eaa0-5ebd-4475-b3f0-da269a9c803f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T17:24:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7380eaa0-5ebd-4475-b3f0-da269a9c803f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T17:24:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7380eaa0-5ebd-4475-b3f0-da269a9c803f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-78538d/sub-test-model-78538d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-78538d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T17:24:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7380eaa0-5ebd-4475-b3f0-da269a9c803f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-18T17:24:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7380eaa0-5ebd-4475-b3f0-da269a9c803f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-18T17:24:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7380eaa0-5ebd-4475-b3f0-da269a9c803f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-18T17:24:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7380eaa0-5ebd-4475-b3f0-da269a9c803f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-18T17:24:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7380eaa0-5ebd-4475-b3f0-da269a9c803f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-18T17:24:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a1d7a526-3f68-4643-84e5-df92637711ff","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:33146","PortSpecifier":{"PortValue":33146}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a1d7a526-3f68-4643-84e5-df92637711ff","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-497f21.apps.895c59d4-5776-4983-8d76-ee2580b4b8e8.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-18T17:24:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a1d7a526-3f68-4643-84e5-df92637711ff","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:33146","PortSpecifier":{"PortValue":33146}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784395451,"nanos":821950094},"http":{"id":"a1d7a526-3f68-4643-84e5-df92637711ff","method":"POST","headers":{":authority":"e2e-shared-b-497f21.apps.895c59d4-5776-4983-8d76-ee2580b4b8e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T17:24:11Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a1d7a526-3f68-4643-84e5-df92637711ff","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-18T17:24:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a1d7a526-3f68-4643-84e5-df92637711ff","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f1b895b9-520b-4c73-9653-1fa79c8c3661","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6e438633-d12a-44b1-b014-279cffb6963d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ee2580b4b8e8"]}} {"level":"debug","ts":"2026-07-18T17:24:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a1d7a526-3f68-4643-84e5-df92637711ff","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ee2580b4b8e8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6e438633-d12a-44b1-b014-279cffb6963d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f1b895b9-520b-4c73-9653-1fa79c8c3661","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-497f21.apps.895c59d4-5776-4983-8d76-ee2580b4b8e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T17:24:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a1d7a526-3f68-4643-84e5-df92637711ff","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T17:24:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a1d7a526-3f68-4643-84e5-df92637711ff","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T17:24:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a1d7a526-3f68-4643-84e5-df92637711ff","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-497f21/sub-test-model-497f21\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-497f21/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T17:24:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a1d7a526-3f68-4643-84e5-df92637711ff","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-18T17:24:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a1d7a526-3f68-4643-84e5-df92637711ff","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-18T17:24:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a1d7a526-3f68-4643-84e5-df92637711ff","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-18T17:24:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a1d7a526-3f68-4643-84e5-df92637711ff","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-18T17:24:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a1d7a526-3f68-4643-84e5-df92637711ff","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-18T17:24:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"137632fe-9cb4-4f93-b94d-32e3503152a4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:45242","PortSpecifier":{"PortValue":45242}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"137632fe-9cb4-4f93-b94d-32e3503152a4","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-78538d.apps.895c59d4-5776-4983-8d76-ee2580b4b8e8.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-18T17:24:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"137632fe-9cb4-4f93-b94d-32e3503152a4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:45242","PortSpecifier":{"PortValue":45242}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784395451,"nanos":858925267},"http":{"id":"137632fe-9cb4-4f93-b94d-32e3503152a4","method":"GET","headers":{":authority":"e2e-shared-a-78538d.apps.895c59d4-5776-4983-8d76-ee2580b4b8e8.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T17:24:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"137632fe-9cb4-4f93-b94d-32e3503152a4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1OUKYgxKb3DOFsiML_excJLxKUEu5W70go4HQmtuU3CByXv3vn70CjX3hvLsz"} {"level":"debug","ts":"2026-07-18T17:24:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"137632fe-9cb4-4f93-b94d-32e3503152a4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-78538d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1OUKYgxKb3DOFsiML_excJLxKUEu5W70go4HQmtuU3CByXv3vn70CjX3hvLsz\"}"} {"level":"debug","ts":"2026-07-18T17:24:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"137632fe-9cb4-4f93-b94d-32e3503152a4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-78538d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"df19d5c4-2b4c-4ed5-8068-65d31793c3dc","keyName":"e2e-sub-iso-ad507e","subscription":"e2e-a-only-7e7cba","tenant":"e2e-shared-a-78538d","userId":"df19d5c4-2b4c-4ed5-8068-65d31793c3dc","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-18T17:24:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"137632fe-9cb4-4f93-b94d-32e3503152a4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T17:24:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"137632fe-9cb4-4f93-b94d-32e3503152a4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T17:24:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"137632fe-9cb4-4f93-b94d-32e3503152a4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T17:24:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"137632fe-9cb4-4f93-b94d-32e3503152a4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-78538d/sub-test-model-78538d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-78538d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T17:24:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"137632fe-9cb4-4f93-b94d-32e3503152a4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-18T17:24:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"137632fe-9cb4-4f93-b94d-32e3503152a4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-18T17:24:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"137632fe-9cb4-4f93-b94d-32e3503152a4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-7e7cba"} {"level":"debug","ts":"2026-07-18T17:24:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"137632fe-9cb4-4f93-b94d-32e3503152a4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-18T17:24:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"137632fe-9cb4-4f93-b94d-32e3503152a4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-18T17:24:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"137632fe-9cb4-4f93-b94d-32e3503152a4","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-18T17:24:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f5cb6f2b-9d56-436a-9457-bb72baf9583d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:33158","PortSpecifier":{"PortValue":33158}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f5cb6f2b-9d56-436a-9457-bb72baf9583d","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-497f21.apps.895c59d4-5776-4983-8d76-ee2580b4b8e8.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-18T17:24:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f5cb6f2b-9d56-436a-9457-bb72baf9583d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:33158","PortSpecifier":{"PortValue":33158}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784395451,"nanos":903726564},"http":{"id":"f5cb6f2b-9d56-436a-9457-bb72baf9583d","method":"GET","headers":{":authority":"e2e-shared-b-497f21.apps.895c59d4-5776-4983-8d76-ee2580b4b8e8.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T17:24:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f5cb6f2b-9d56-436a-9457-bb72baf9583d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1eJMSk7OcWBr6atQo_jh9Ojobr2xbTcUGaeR1Ys990WisZCelj4WLTVJgvUIc"} {"level":"debug","ts":"2026-07-18T17:24:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f5cb6f2b-9d56-436a-9457-bb72baf9583d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-497f21.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1eJMSk7OcWBr6atQo_jh9Ojobr2xbTcUGaeR1Ys990WisZCelj4WLTVJgvUIc\"}"} {"level":"debug","ts":"2026-07-18T17:24:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f5cb6f2b-9d56-436a-9457-bb72baf9583d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-497f21.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5e39f327-d06a-4110-8bd6-dce8da224a71","keyName":"e2e-sub-iso-568c49","subscription":"e2e-b-only-7e7cba","tenant":"e2e-shared-b-497f21","userId":"5e39f327-d06a-4110-8bd6-dce8da224a71","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-18T17:24:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f5cb6f2b-9d56-436a-9457-bb72baf9583d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T17:24:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f5cb6f2b-9d56-436a-9457-bb72baf9583d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T17:24:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f5cb6f2b-9d56-436a-9457-bb72baf9583d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T17:24:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f5cb6f2b-9d56-436a-9457-bb72baf9583d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-497f21/sub-test-model-497f21\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-497f21/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T17:24:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f5cb6f2b-9d56-436a-9457-bb72baf9583d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-18T17:24:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f5cb6f2b-9d56-436a-9457-bb72baf9583d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-18T17:24:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f5cb6f2b-9d56-436a-9457-bb72baf9583d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-7e7cba"} {"level":"debug","ts":"2026-07-18T17:24:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f5cb6f2b-9d56-436a-9457-bb72baf9583d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-18T17:24:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f5cb6f2b-9d56-436a-9457-bb72baf9583d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-18T17:24:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f5cb6f2b-9d56-436a-9457-bb72baf9583d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-18T17:24:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a89e498b1a0238180adfd7933935d4a23625d79f7fd777c6d44b54556f5ba26c"} {"level":"info","ts":"2026-07-18T17:24:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/175e4cdc26d29960ce6d8bc2fba411fcbffab1591b5450037d0d5fa45b78d0bd"} {"level":"info","ts":"2026-07-18T17:24:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/86d39625ca338ecb8918bb786c949b4b1855b4922bdd330a29b1150c3099a6c4"} {"level":"info","ts":"2026-07-18T17:24:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/00cc40fc42e5ca46b4aef101e22ec2455e872b0eb6b6821b18ae0c3e69a75472"} {"level":"info","ts":"2026-07-18T17:24:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f16474fc63eee461fd57a552fa9b8d6ea39b61825fd637fd55ab392846ecfb77"} {"level":"info","ts":"2026-07-18T17:24:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f750141328196ac788f42b6513d38861fec75aecfd4e8f883b5a6cc1e38c4d0b"} {"level":"info","ts":"2026-07-18T17:24:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/015c9cc290ecdf7de3c9b108b2aaa2d0b8827bc03e39b8977906d9b41479d386"} {"level":"info","ts":"2026-07-18T17:24:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/204688c86718d36be4c020b69aef1496396eb1a0cb425f719468b2f9d613f8be"} {"level":"info","ts":"2026-07-18T17:24:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0"} {"level":"info","ts":"2026-07-18T17:24:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b8fe1f0074091d4476c9d0cdef210c678dea2850cddb9b5b0e0405256b63a46a"} {"level":"info","ts":"2026-07-18T17:24:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/41d5f22e86e31b445a00fc9e48d273ce757f7dfe5d37d5f39725e3b256badbfe"} {"level":"info","ts":"2026-07-18T17:24:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4f8b553bff07f64cf5c066e5b917e725877c25113999fed20ae0b032df5c7271"} {"level":"info","ts":"2026-07-18T17:24:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aaa8461f25ffb323f1e10b382f6de0e52765d1698b8e96dcb8be38be15f055f2"} {"level":"info","ts":"2026-07-18T17:24:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/17116ee24609288803998c6c7286129dd64bebc047c9d29f431211684e283625"} {"level":"info","ts":"2026-07-18T17:24:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eeec35435dae4d11ef4448e7497f2507b94c577c6d026a60914fe8dd7dfc631a"} {"level":"info","ts":"2026-07-18T17:24:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/77adaddda22bbd4b3708a1080d8f15186449d207733819b59acbd9fc046e5aa0"} {"level":"info","ts":"2026-07-18T17:24:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/18136a7ea3224fd4fe8d635f843eeb7edcb7aef1c349914ac7d6844a9ff43eff"} {"level":"info","ts":"2026-07-18T17:24:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0c014f029bd221da15ec954a4f5a0f69aba5b7d1216507787b6905ef731ff215"} {"level":"info","ts":"2026-07-18T17:24:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/00da27777581d4c8435848043bc93d90a9fc2159cae93fd3893ddfcac5211202"} {"level":"info","ts":"2026-07-18T17:24:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/067d4eb0919195807c996cd7d2a1d2c436fb60d6b843fc649b7ec5097a591ac2"} {"level":"info","ts":"2026-07-18T17:24:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a308c06619b88014342d5e31c2fdd5bc331c96f7224f5f9d50bc0fb194f6a8ce"} {"level":"info","ts":"2026-07-18T17:24:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/42e282d5a644cba50a26757fee2bd85faafd4b2f4a8daba4f1edb86171fc174e"} {"level":"info","ts":"2026-07-18T17:24:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4"} {"level":"info","ts":"2026-07-18T17:24:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/396f2ac7e57e386353ac14e93e44bf55ebaa23c330ef08bbf9bae423c9acbaa3"} {"level":"debug","ts":"2026-07-18T17:24:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17116ee24609288803998c6c7286129dd64bebc047c9d29f431211684e283625","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:24:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:24:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17116ee24609288803998c6c7286129dd64bebc047c9d29f431211684e283625","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T17:24:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17116ee24609288803998c6c7286129dd64bebc047c9d29f431211684e283625"} {"level":"debug","ts":"2026-07-18T17:24:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17116ee24609288803998c6c7286129dd64bebc047c9d29f431211684e283625","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:24:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:24:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["17116ee24609288803998c6c7286129dd64bebc047c9d29f431211684e283625"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17116ee24609288803998c6c7286129dd64bebc047c9d29f431211684e283625","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"17116ee24609288803998c6c7286129dd64bebc047c9d29f431211684e283625","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17116ee24609288803998c6c7286129dd64bebc047c9d29f431211684e283625","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:24:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:24:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17116ee24609288803998c6c7286129dd64bebc047c9d29f431211684e283625"} {"level":"info","ts":"2026-07-18T17:24:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17116ee24609288803998c6c7286129dd64bebc047c9d29f431211684e283625","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17116ee24609288803998c6c7286129dd64bebc047c9d29f431211684e283625","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:24:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:24:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17116ee24609288803998c6c7286129dd64bebc047c9d29f431211684e283625"} {"level":"error","ts":"2026-07-18T17:24:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"17116ee24609288803998c6c7286129dd64bebc047c9d29f431211684e283625","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"17116ee24609288803998c6c7286129dd64bebc047c9d29f431211684e283625\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-18T17:24:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"17116ee24609288803998c6c7286129dd64bebc047c9d29f431211684e283625","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"17116ee24609288803998c6c7286129dd64bebc047c9d29f431211684e283625","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T17:24:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17116ee24609288803998c6c7286129dd64bebc047c9d29f431211684e283625"} {"level":"debug","ts":"2026-07-18T17:24:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17116ee24609288803998c6c7286129dd64bebc047c9d29f431211684e283625","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:24:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:24:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["17116ee24609288803998c6c7286129dd64bebc047c9d29f431211684e283625"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17116ee24609288803998c6c7286129dd64bebc047c9d29f431211684e283625","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"17116ee24609288803998c6c7286129dd64bebc047c9d29f431211684e283625","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T17:24:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17116ee24609288803998c6c7286129dd64bebc047c9d29f431211684e283625"} {"level":"debug","ts":"2026-07-18T17:24:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:24:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:24:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0"} {"level":"info","ts":"2026-07-18T17:24:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T17:24:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0"} {"level":"debug","ts":"2026-07-18T17:24:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:24:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:24:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T17:24:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0"} {"level":"debug","ts":"2026-07-18T17:24:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b8fe1f0074091d4476c9d0cdef210c678dea2850cddb9b5b0e0405256b63a46a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:24:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:24:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8fe1f0074091d4476c9d0cdef210c678dea2850cddb9b5b0e0405256b63a46a"} {"level":"info","ts":"2026-07-18T17:24:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8fe1f0074091d4476c9d0cdef210c678dea2850cddb9b5b0e0405256b63a46a"} {"level":"info","ts":"2026-07-18T17:24:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b8fe1f0074091d4476c9d0cdef210c678dea2850cddb9b5b0e0405256b63a46a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b8fe1f0074091d4476c9d0cdef210c678dea2850cddb9b5b0e0405256b63a46a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:24:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:24:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b8fe1f0074091d4476c9d0cdef210c678dea2850cddb9b5b0e0405256b63a46a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/204688c86718d36be4c020b69aef1496396eb1a0cb425f719468b2f9d613f8be"} {"level":"info","ts":"2026-07-18T17:24:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b8fe1f0074091d4476c9d0cdef210c678dea2850cddb9b5b0e0405256b63a46a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"204688c86718d36be4c020b69aef1496396eb1a0cb425f719468b2f9d613f8be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:24:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:24:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["204688c86718d36be4c020b69aef1496396eb1a0cb425f719468b2f9d613f8be"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8fe1f0074091d4476c9d0cdef210c678dea2850cddb9b5b0e0405256b63a46a"} {"level":"info","ts":"2026-07-18T17:24:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a308c06619b88014342d5e31c2fdd5bc331c96f7224f5f9d50bc0fb194f6a8ce"} {"level":"info","ts":"2026-07-18T17:24:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"204688c86718d36be4c020b69aef1496396eb1a0cb425f719468b2f9d613f8be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b8fe1f0074091d4476c9d0cdef210c678dea2850cddb9b5b0e0405256b63a46a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a308c06619b88014342d5e31c2fdd5bc331c96f7224f5f9d50bc0fb194f6a8ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:24:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:24:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a308c06619b88014342d5e31c2fdd5bc331c96f7224f5f9d50bc0fb194f6a8ce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/204688c86718d36be4c020b69aef1496396eb1a0cb425f719468b2f9d613f8be"} {"level":"info","ts":"2026-07-18T17:24:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a308c06619b88014342d5e31c2fdd5bc331c96f7224f5f9d50bc0fb194f6a8ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"204688c86718d36be4c020b69aef1496396eb1a0cb425f719468b2f9d613f8be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a308c06619b88014342d5e31c2fdd5bc331c96f7224f5f9d50bc0fb194f6a8ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:24:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:24:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a308c06619b88014342d5e31c2fdd5bc331c96f7224f5f9d50bc0fb194f6a8ce"} {"level":"info","ts":"2026-07-18T17:24:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a308c06619b88014342d5e31c2fdd5bc331c96f7224f5f9d50bc0fb194f6a8ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a308c06619b88014342d5e31c2fdd5bc331c96f7224f5f9d50bc0fb194f6a8ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:24:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:24:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a308c06619b88014342d5e31c2fdd5bc331c96f7224f5f9d50bc0fb194f6a8ce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a308c06619b88014342d5e31c2fdd5bc331c96f7224f5f9d50bc0fb194f6a8ce"} {"level":"info","ts":"2026-07-18T17:24:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a308c06619b88014342d5e31c2fdd5bc331c96f7224f5f9d50bc0fb194f6a8ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"175e4cdc26d29960ce6d8bc2fba411fcbffab1591b5450037d0d5fa45b78d0bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:24:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:24:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/175e4cdc26d29960ce6d8bc2fba411fcbffab1591b5450037d0d5fa45b78d0bd"} {"level":"info","ts":"2026-07-18T17:24:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a308c06619b88014342d5e31c2fdd5bc331c96f7224f5f9d50bc0fb194f6a8ce"} {"level":"info","ts":"2026-07-18T17:24:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"175e4cdc26d29960ce6d8bc2fba411fcbffab1591b5450037d0d5fa45b78d0bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a308c06619b88014342d5e31c2fdd5bc331c96f7224f5f9d50bc0fb194f6a8ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41d5f22e86e31b445a00fc9e48d273ce757f7dfe5d37d5f39725e3b256badbfe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:24:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:24:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41d5f22e86e31b445a00fc9e48d273ce757f7dfe5d37d5f39725e3b256badbfe"} {"level":"info","ts":"2026-07-18T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/175e4cdc26d29960ce6d8bc2fba411fcbffab1591b5450037d0d5fa45b78d0bd"} {"level":"info","ts":"2026-07-18T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41d5f22e86e31b445a00fc9e48d273ce757f7dfe5d37d5f39725e3b256badbfe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"175e4cdc26d29960ce6d8bc2fba411fcbffab1591b5450037d0d5fa45b78d0bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:24:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:24:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["175e4cdc26d29960ce6d8bc2fba411fcbffab1591b5450037d0d5fa45b78d0bd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00da27777581d4c8435848043bc93d90a9fc2159cae93fd3893ddfcac5211202"} {"level":"info","ts":"2026-07-18T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41d5f22e86e31b445a00fc9e48d273ce757f7dfe5d37d5f39725e3b256badbfe"} {"level":"info","ts":"2026-07-18T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"175e4cdc26d29960ce6d8bc2fba411fcbffab1591b5450037d0d5fa45b78d0bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00da27777581d4c8435848043bc93d90a9fc2159cae93fd3893ddfcac5211202","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:24:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:24:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["00da27777581d4c8435848043bc93d90a9fc2159cae93fd3893ddfcac5211202"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aaa8461f25ffb323f1e10b382f6de0e52765d1698b8e96dcb8be38be15f055f2"} {"level":"info","ts":"2026-07-18T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/175e4cdc26d29960ce6d8bc2fba411fcbffab1591b5450037d0d5fa45b78d0bd"} {"level":"info","ts":"2026-07-18T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00da27777581d4c8435848043bc93d90a9fc2159cae93fd3893ddfcac5211202","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41d5f22e86e31b445a00fc9e48d273ce757f7dfe5d37d5f39725e3b256badbfe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:24:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:24:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["41d5f22e86e31b445a00fc9e48d273ce757f7dfe5d37d5f39725e3b256badbfe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00da27777581d4c8435848043bc93d90a9fc2159cae93fd3893ddfcac5211202"} {"level":"info","ts":"2026-07-18T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77adaddda22bbd4b3708a1080d8f15186449d207733819b59acbd9fc046e5aa0"} {"level":"info","ts":"2026-07-18T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41d5f22e86e31b445a00fc9e48d273ce757f7dfe5d37d5f39725e3b256badbfe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aaa8461f25ffb323f1e10b382f6de0e52765d1698b8e96dcb8be38be15f055f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:24:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:24:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aaa8461f25ffb323f1e10b382f6de0e52765d1698b8e96dcb8be38be15f055f2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41d5f22e86e31b445a00fc9e48d273ce757f7dfe5d37d5f39725e3b256badbfe"} {"level":"info","ts":"2026-07-18T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aaa8461f25ffb323f1e10b382f6de0e52765d1698b8e96dcb8be38be15f055f2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"175e4cdc26d29960ce6d8bc2fba411fcbffab1591b5450037d0d5fa45b78d0bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00da27777581d4c8435848043bc93d90a9fc2159cae93fd3893ddfcac5211202","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77adaddda22bbd4b3708a1080d8f15186449d207733819b59acbd9fc046e5aa0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:24:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:24:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["77adaddda22bbd4b3708a1080d8f15186449d207733819b59acbd9fc046e5aa0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aaa8461f25ffb323f1e10b382f6de0e52765d1698b8e96dcb8be38be15f055f2"} {"level":"info","ts":"2026-07-18T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77adaddda22bbd4b3708a1080d8f15186449d207733819b59acbd9fc046e5aa0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"41d5f22e86e31b445a00fc9e48d273ce757f7dfe5d37d5f39725e3b256badbfe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aaa8461f25ffb323f1e10b382f6de0e52765d1698b8e96dcb8be38be15f055f2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f750141328196ac788f42b6513d38861fec75aecfd4e8f883b5a6cc1e38c4d0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:24:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:24:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f750141328196ac788f42b6513d38861fec75aecfd4e8f883b5a6cc1e38c4d0b"} {"level":"info","ts":"2026-07-18T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77adaddda22bbd4b3708a1080d8f15186449d207733819b59acbd9fc046e5aa0"} {"level":"info","ts":"2026-07-18T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f750141328196ac788f42b6513d38861fec75aecfd4e8f883b5a6cc1e38c4d0b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77adaddda22bbd4b3708a1080d8f15186449d207733819b59acbd9fc046e5aa0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f750141328196ac788f42b6513d38861fec75aecfd4e8f883b5a6cc1e38c4d0b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f750141328196ac788f42b6513d38861fec75aecfd4e8f883b5a6cc1e38c4d0b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f750141328196ac788f42b6513d38861fec75aecfd4e8f883b5a6cc1e38c4d0b"} {"level":"debug","ts":"2026-07-18T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f750141328196ac788f42b6513d38861fec75aecfd4e8f883b5a6cc1e38c4d0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:24:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:24:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f750141328196ac788f42b6513d38861fec75aecfd4e8f883b5a6cc1e38c4d0b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/396f2ac7e57e386353ac14e93e44bf55ebaa23c330ef08bbf9bae423c9acbaa3"} {"level":"info","ts":"2026-07-18T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f750141328196ac788f42b6513d38861fec75aecfd4e8f883b5a6cc1e38c4d0b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"396f2ac7e57e386353ac14e93e44bf55ebaa23c330ef08bbf9bae423c9acbaa3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:24:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:24:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["396f2ac7e57e386353ac14e93e44bf55ebaa23c330ef08bbf9bae423c9acbaa3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f750141328196ac788f42b6513d38861fec75aecfd4e8f883b5a6cc1e38c4d0b"} {"level":"info","ts":"2026-07-18T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"396f2ac7e57e386353ac14e93e44bf55ebaa23c330ef08bbf9bae423c9acbaa3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f750141328196ac788f42b6513d38861fec75aecfd4e8f883b5a6cc1e38c4d0b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"396f2ac7e57e386353ac14e93e44bf55ebaa23c330ef08bbf9bae423c9acbaa3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:24:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:24:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/396f2ac7e57e386353ac14e93e44bf55ebaa23c330ef08bbf9bae423c9acbaa3"} {"level":"info","ts":"2026-07-18T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"396f2ac7e57e386353ac14e93e44bf55ebaa23c330ef08bbf9bae423c9acbaa3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86d39625ca338ecb8918bb786c949b4b1855b4922bdd330a29b1150c3099a6c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:24:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:24:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86d39625ca338ecb8918bb786c949b4b1855b4922bdd330a29b1150c3099a6c4"} {"level":"info","ts":"2026-07-18T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86d39625ca338ecb8918bb786c949b4b1855b4922bdd330a29b1150c3099a6c4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"396f2ac7e57e386353ac14e93e44bf55ebaa23c330ef08bbf9bae423c9acbaa3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f8b553bff07f64cf5c066e5b917e725877c25113999fed20ae0b032df5c7271","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:24:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:24:26Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/396f2ac7e57e386353ac14e93e44bf55ebaa23c330ef08bbf9bae423c9acbaa3"} {"level":"info","ts":"2026-07-18T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f8b553bff07f64cf5c066e5b917e725877c25113999fed20ae0b032df5c7271","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86d39625ca338ecb8918bb786c949b4b1855b4922bdd330a29b1150c3099a6c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:24:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:24:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["86d39625ca338ecb8918bb786c949b4b1855b4922bdd330a29b1150c3099a6c4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f8b553bff07f64cf5c066e5b917e725877c25113999fed20ae0b032df5c7271"} {"level":"info","ts":"2026-07-18T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86d39625ca338ecb8918bb786c949b4b1855b4922bdd330a29b1150c3099a6c4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"396f2ac7e57e386353ac14e93e44bf55ebaa23c330ef08bbf9bae423c9acbaa3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:24:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:24:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["396f2ac7e57e386353ac14e93e44bf55ebaa23c330ef08bbf9bae423c9acbaa3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86d39625ca338ecb8918bb786c949b4b1855b4922bdd330a29b1150c3099a6c4"} {"level":"info","ts":"2026-07-18T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"396f2ac7e57e386353ac14e93e44bf55ebaa23c330ef08bbf9bae423c9acbaa3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f16474fc63eee461fd57a552fa9b8d6ea39b61825fd637fd55ab392846ecfb77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:24:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:24:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f16474fc63eee461fd57a552fa9b8d6ea39b61825fd637fd55ab392846ecfb77"} {"level":"info","ts":"2026-07-18T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f8b553bff07f64cf5c066e5b917e725877c25113999fed20ae0b032df5c7271"} {"level":"info","ts":"2026-07-18T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f16474fc63eee461fd57a552fa9b8d6ea39b61825fd637fd55ab392846ecfb77","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f8b553bff07f64cf5c066e5b917e725877c25113999fed20ae0b032df5c7271","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:24:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:24:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4f8b553bff07f64cf5c066e5b917e725877c25113999fed20ae0b032df5c7271"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/067d4eb0919195807c996cd7d2a1d2c436fb60d6b843fc649b7ec5097a591ac2"} {"level":"info","ts":"2026-07-18T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f8b553bff07f64cf5c066e5b917e725877c25113999fed20ae0b032df5c7271","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"067d4eb0919195807c996cd7d2a1d2c436fb60d6b843fc649b7ec5097a591ac2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:24:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:24:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["067d4eb0919195807c996cd7d2a1d2c436fb60d6b843fc649b7ec5097a591ac2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18136a7ea3224fd4fe8d635f843eeb7edcb7aef1c349914ac7d6844a9ff43eff"} {"level":"info","ts":"2026-07-18T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"067d4eb0919195807c996cd7d2a1d2c436fb60d6b843fc649b7ec5097a591ac2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86d39625ca338ecb8918bb786c949b4b1855b4922bdd330a29b1150c3099a6c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:24:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:24:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86d39625ca338ecb8918bb786c949b4b1855b4922bdd330a29b1150c3099a6c4"} {"level":"info","ts":"2026-07-18T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86d39625ca338ecb8918bb786c949b4b1855b4922bdd330a29b1150c3099a6c4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18136a7ea3224fd4fe8d635f843eeb7edcb7aef1c349914ac7d6844a9ff43eff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:24:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:24:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18136a7ea3224fd4fe8d635f843eeb7edcb7aef1c349914ac7d6844a9ff43eff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00cc40fc42e5ca46b4aef101e22ec2455e872b0eb6b6821b18ae0c3e69a75472"} {"level":"info","ts":"2026-07-18T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/396f2ac7e57e386353ac14e93e44bf55ebaa23c330ef08bbf9bae423c9acbaa3"} {"level":"info","ts":"2026-07-18T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18136a7ea3224fd4fe8d635f843eeb7edcb7aef1c349914ac7d6844a9ff43eff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00cc40fc42e5ca46b4aef101e22ec2455e872b0eb6b6821b18ae0c3e69a75472","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:24:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:24:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["00cc40fc42e5ca46b4aef101e22ec2455e872b0eb6b6821b18ae0c3e69a75472"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00cc40fc42e5ca46b4aef101e22ec2455e872b0eb6b6821b18ae0c3e69a75472","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"396f2ac7e57e386353ac14e93e44bf55ebaa23c330ef08bbf9bae423c9acbaa3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f16474fc63eee461fd57a552fa9b8d6ea39b61825fd637fd55ab392846ecfb77","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42e282d5a644cba50a26757fee2bd85faafd4b2f4a8daba4f1edb86171fc174e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:24:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:24:26Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f16474fc63eee461fd57a552fa9b8d6ea39b61825fd637fd55ab392846ecfb77"} {"level":"info","ts":"2026-07-18T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42e282d5a644cba50a26757fee2bd85faafd4b2f4a8daba4f1edb86171fc174e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c014f029bd221da15ec954a4f5a0f69aba5b7d1216507787b6905ef731ff215","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:24:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:24:26Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42e282d5a644cba50a26757fee2bd85faafd4b2f4a8daba4f1edb86171fc174e"} {"level":"info","ts":"2026-07-18T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c014f029bd221da15ec954a4f5a0f69aba5b7d1216507787b6905ef731ff215","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f8b553bff07f64cf5c066e5b917e725877c25113999fed20ae0b032df5c7271","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"067d4eb0919195807c996cd7d2a1d2c436fb60d6b843fc649b7ec5097a591ac2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a89e498b1a0238180adfd7933935d4a23625d79f7fd777c6d44b54556f5ba26c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:24:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:24:26Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c014f029bd221da15ec954a4f5a0f69aba5b7d1216507787b6905ef731ff215"} {"level":"info","ts":"2026-07-18T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a89e498b1a0238180adfd7933935d4a23625d79f7fd777c6d44b54556f5ba26c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86d39625ca338ecb8918bb786c949b4b1855b4922bdd330a29b1150c3099a6c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:24:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:24:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["86d39625ca338ecb8918bb786c949b4b1855b4922bdd330a29b1150c3099a6c4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f8b553bff07f64cf5c066e5b917e725877c25113999fed20ae0b032df5c7271"} {"level":"info","ts":"2026-07-18T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86d39625ca338ecb8918bb786c949b4b1855b4922bdd330a29b1150c3099a6c4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eeec35435dae4d11ef4448e7497f2507b94c577c6d026a60914fe8dd7dfc631a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:24:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:24:26Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/067d4eb0919195807c996cd7d2a1d2c436fb60d6b843fc649b7ec5097a591ac2"} {"level":"info","ts":"2026-07-18T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eeec35435dae4d11ef4448e7497f2507b94c577c6d026a60914fe8dd7dfc631a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18136a7ea3224fd4fe8d635f843eeb7edcb7aef1c349914ac7d6844a9ff43eff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:24:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:24:26Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a89e498b1a0238180adfd7933935d4a23625d79f7fd777c6d44b54556f5ba26c"} {"level":"info","ts":"2026-07-18T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00cc40fc42e5ca46b4aef101e22ec2455e872b0eb6b6821b18ae0c3e69a75472","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f16474fc63eee461fd57a552fa9b8d6ea39b61825fd637fd55ab392846ecfb77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:24:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:24:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f16474fc63eee461fd57a552fa9b8d6ea39b61825fd637fd55ab392846ecfb77"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86d39625ca338ecb8918bb786c949b4b1855b4922bdd330a29b1150c3099a6c4"} {"level":"info","ts":"2026-07-18T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f16474fc63eee461fd57a552fa9b8d6ea39b61825fd637fd55ab392846ecfb77","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42e282d5a644cba50a26757fee2bd85faafd4b2f4a8daba4f1edb86171fc174e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:24:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:24:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["42e282d5a644cba50a26757fee2bd85faafd4b2f4a8daba4f1edb86171fc174e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eeec35435dae4d11ef4448e7497f2507b94c577c6d026a60914fe8dd7dfc631a"} {"level":"info","ts":"2026-07-18T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18136a7ea3224fd4fe8d635f843eeb7edcb7aef1c349914ac7d6844a9ff43eff"} {"level":"info","ts":"2026-07-18T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42e282d5a644cba50a26757fee2bd85faafd4b2f4a8daba4f1edb86171fc174e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"015c9cc290ecdf7de3c9b108b2aaa2d0b8827bc03e39b8977906d9b41479d386","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:24:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:24:26Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4"} {"level":"info","ts":"2026-07-18T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"015c9cc290ecdf7de3c9b108b2aaa2d0b8827bc03e39b8977906d9b41479d386","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c014f029bd221da15ec954a4f5a0f69aba5b7d1216507787b6905ef731ff215","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:24:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:24:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0c014f029bd221da15ec954a4f5a0f69aba5b7d1216507787b6905ef731ff215"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00cc40fc42e5ca46b4aef101e22ec2455e872b0eb6b6821b18ae0c3e69a75472"} {"level":"info","ts":"2026-07-18T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c014f029bd221da15ec954a4f5a0f69aba5b7d1216507787b6905ef731ff215","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a89e498b1a0238180adfd7933935d4a23625d79f7fd777c6d44b54556f5ba26c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:24:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:24:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a89e498b1a0238180adfd7933935d4a23625d79f7fd777c6d44b54556f5ba26c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42e282d5a644cba50a26757fee2bd85faafd4b2f4a8daba4f1edb86171fc174e"} {"level":"info","ts":"2026-07-18T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a89e498b1a0238180adfd7933935d4a23625d79f7fd777c6d44b54556f5ba26c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86d39625ca338ecb8918bb786c949b4b1855b4922bdd330a29b1150c3099a6c4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eeec35435dae4d11ef4448e7497f2507b94c577c6d026a60914fe8dd7dfc631a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:24:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:24:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eeec35435dae4d11ef4448e7497f2507b94c577c6d026a60914fe8dd7dfc631a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/015c9cc290ecdf7de3c9b108b2aaa2d0b8827bc03e39b8977906d9b41479d386"} {"level":"info","ts":"2026-07-18T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eeec35435dae4d11ef4448e7497f2507b94c577c6d026a60914fe8dd7dfc631a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:24:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:24:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c014f029bd221da15ec954a4f5a0f69aba5b7d1216507787b6905ef731ff215"} {"level":"info","ts":"2026-07-18T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f16474fc63eee461fd57a552fa9b8d6ea39b61825fd637fd55ab392846ecfb77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:24:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:24:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f16474fc63eee461fd57a552fa9b8d6ea39b61825fd637fd55ab392846ecfb77"} {"level":"info","ts":"2026-07-18T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f16474fc63eee461fd57a552fa9b8d6ea39b61825fd637fd55ab392846ecfb77","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42e282d5a644cba50a26757fee2bd85faafd4b2f4a8daba4f1edb86171fc174e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"015c9cc290ecdf7de3c9b108b2aaa2d0b8827bc03e39b8977906d9b41479d386","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:24:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:24:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["015c9cc290ecdf7de3c9b108b2aaa2d0b8827bc03e39b8977906d9b41479d386"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a89e498b1a0238180adfd7933935d4a23625d79f7fd777c6d44b54556f5ba26c"} {"level":"info","ts":"2026-07-18T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"015c9cc290ecdf7de3c9b108b2aaa2d0b8827bc03e39b8977906d9b41479d386","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0c014f029bd221da15ec954a4f5a0f69aba5b7d1216507787b6905ef731ff215","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a89e498b1a0238180adfd7933935d4a23625d79f7fd777c6d44b54556f5ba26c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eeec35435dae4d11ef4448e7497f2507b94c577c6d026a60914fe8dd7dfc631a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:24:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:24:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eeec35435dae4d11ef4448e7497f2507b94c577c6d026a60914fe8dd7dfc631a"} {"level":"info","ts":"2026-07-18T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eeec35435dae4d11ef4448e7497f2507b94c577c6d026a60914fe8dd7dfc631a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:24:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:24:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4"} {"level":"info","ts":"2026-07-18T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f16474fc63eee461fd57a552fa9b8d6ea39b61825fd637fd55ab392846ecfb77"} {"level":"info","ts":"2026-07-18T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f16474fc63eee461fd57a552fa9b8d6ea39b61825fd637fd55ab392846ecfb77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:24:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:24:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f16474fc63eee461fd57a552fa9b8d6ea39b61825fd637fd55ab392846ecfb77"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/015c9cc290ecdf7de3c9b108b2aaa2d0b8827bc03e39b8977906d9b41479d386"} {"level":"info","ts":"2026-07-18T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f16474fc63eee461fd57a552fa9b8d6ea39b61825fd637fd55ab392846ecfb77","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"015c9cc290ecdf7de3c9b108b2aaa2d0b8827bc03e39b8977906d9b41479d386","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eeec35435dae4d11ef4448e7497f2507b94c577c6d026a60914fe8dd7dfc631a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:24:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:24:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eeec35435dae4d11ef4448e7497f2507b94c577c6d026a60914fe8dd7dfc631a"} {"level":"info","ts":"2026-07-18T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f16474fc63eee461fd57a552fa9b8d6ea39b61825fd637fd55ab392846ecfb77","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eeec35435dae4d11ef4448e7497f2507b94c577c6d026a60914fe8dd7dfc631a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:24:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:24:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eeec35435dae4d11ef4448e7497f2507b94c577c6d026a60914fe8dd7dfc631a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4"} {"level":"info","ts":"2026-07-18T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f16474fc63eee461fd57a552fa9b8d6ea39b61825fd637fd55ab392846ecfb77"} {"level":"info","ts":"2026-07-18T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eeec35435dae4d11ef4448e7497f2507b94c577c6d026a60914fe8dd7dfc631a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:24:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:24:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4"} {"level":"info","ts":"2026-07-18T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eeec35435dae4d11ef4448e7497f2507b94c577c6d026a60914fe8dd7dfc631a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:24:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:24:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eeec35435dae4d11ef4448e7497f2507b94c577c6d026a60914fe8dd7dfc631a"} {"level":"info","ts":"2026-07-18T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eeec35435dae4d11ef4448e7497f2507b94c577c6d026a60914fe8dd7dfc631a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eeec35435dae4d11ef4448e7497f2507b94c577c6d026a60914fe8dd7dfc631a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:24:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:24:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eeec35435dae4d11ef4448e7497f2507b94c577c6d026a60914fe8dd7dfc631a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4"} {"level":"info","ts":"2026-07-18T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eeec35435dae4d11ef4448e7497f2507b94c577c6d026a60914fe8dd7dfc631a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:24:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:24:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eeec35435dae4d11ef4448e7497f2507b94c577c6d026a60914fe8dd7dfc631a"} {"level":"info","ts":"2026-07-18T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eeec35435dae4d11ef4448e7497f2507b94c577c6d026a60914fe8dd7dfc631a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:24:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:24:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eeec35435dae4d11ef4448e7497f2507b94c577c6d026a60914fe8dd7dfc631a"} {"level":"info","ts":"2026-07-18T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eeec35435dae4d11ef4448e7497f2507b94c577c6d026a60914fe8dd7dfc631a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:24:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:24:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4"} {"level":"info","ts":"2026-07-18T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eeec35435dae4d11ef4448e7497f2507b94c577c6d026a60914fe8dd7dfc631a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eeec35435dae4d11ef4448e7497f2507b94c577c6d026a60914fe8dd7dfc631a"} {"level":"debug","ts":"2026-07-18T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:24:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:24:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eeec35435dae4d11ef4448e7497f2507b94c577c6d026a60914fe8dd7dfc631a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:24:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:24:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eeec35435dae4d11ef4448e7497f2507b94c577c6d026a60914fe8dd7dfc631a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4"} {"level":"info","ts":"2026-07-18T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eeec35435dae4d11ef4448e7497f2507b94c577c6d026a60914fe8dd7dfc631a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:24:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:24:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4"} {"level":"info","ts":"2026-07-18T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eeec35435dae4d11ef4448e7497f2507b94c577c6d026a60914fe8dd7dfc631a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:24:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:24:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eeec35435dae4d11ef4448e7497f2507b94c577c6d026a60914fe8dd7dfc631a"} {"level":"info","ts":"2026-07-18T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eeec35435dae4d11ef4448e7497f2507b94c577c6d026a60914fe8dd7dfc631a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eeec35435dae4d11ef4448e7497f2507b94c577c6d026a60914fe8dd7dfc631a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:24:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:24:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eeec35435dae4d11ef4448e7497f2507b94c577c6d026a60914fe8dd7dfc631a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4"} {"level":"info","ts":"2026-07-18T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eeec35435dae4d11ef4448e7497f2507b94c577c6d026a60914fe8dd7dfc631a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:24:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:24:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eeec35435dae4d11ef4448e7497f2507b94c577c6d026a60914fe8dd7dfc631a"} {"level":"info","ts":"2026-07-18T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eeec35435dae4d11ef4448e7497f2507b94c577c6d026a60914fe8dd7dfc631a"} {"level":"info","ts":"2026-07-18T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eeec35435dae4d11ef4448e7497f2507b94c577c6d026a60914fe8dd7dfc631a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:24:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:24:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4"} {"level":"info","ts":"2026-07-18T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4"} {"level":"debug","ts":"2026-07-18T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:24:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:24:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:24:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:24:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4"} {"level":"info","ts":"2026-07-18T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4"} {"level":"debug","ts":"2026-07-18T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:24:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:24:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:24:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:24:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4"} {"level":"info","ts":"2026-07-18T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4"} {"level":"debug","ts":"2026-07-18T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:24:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:24:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:24:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:24:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4"} {"level":"info","ts":"2026-07-18T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4"} {"level":"debug","ts":"2026-07-18T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:24:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:24:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4"} {"level":"info","ts":"2026-07-18T17:24:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9c8d55d3-7132-4f36-bc2d-c4ae49efb1f4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:60432","PortSpecifier":{"PortValue":60432}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9c8d55d3-7132-4f36-bc2d-c4ae49efb1f4","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-78538d.apps.895c59d4-5776-4983-8d76-ee2580b4b8e8.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-18T17:24:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9c8d55d3-7132-4f36-bc2d-c4ae49efb1f4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:60432","PortSpecifier":{"PortValue":60432}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784395468,"nanos":245778861},"http":{"id":"9c8d55d3-7132-4f36-bc2d-c4ae49efb1f4","method":"POST","headers":{":authority":"e2e-shared-a-78538d.apps.895c59d4-5776-4983-8d76-ee2580b4b8e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T17:24:28Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9c8d55d3-7132-4f36-bc2d-c4ae49efb1f4","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-18T17:24:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9c8d55d3-7132-4f36-bc2d-c4ae49efb1f4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f1b895b9-520b-4c73-9653-1fa79c8c3661","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6e438633-d12a-44b1-b014-279cffb6963d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ee2580b4b8e8"]}} {"level":"debug","ts":"2026-07-18T17:24:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9c8d55d3-7132-4f36-bc2d-c4ae49efb1f4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ee2580b4b8e8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6e438633-d12a-44b1-b014-279cffb6963d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f1b895b9-520b-4c73-9653-1fa79c8c3661","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"175e4cdc26d29960ce6d8bc2fba411fcbffab1591b5450037d0d5fa45b78d0bd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-78538d.apps.895c59d4-5776-4983-8d76-ee2580b4b8e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T17:24:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9c8d55d3-7132-4f36-bc2d-c4ae49efb1f4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T17:24:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9c8d55d3-7132-4f36-bc2d-c4ae49efb1f4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T17:24:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9c8d55d3-7132-4f36-bc2d-c4ae49efb1f4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-78538d/sub-test-model-78538d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-78538d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T17:24:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9c8d55d3-7132-4f36-bc2d-c4ae49efb1f4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-18T17:24:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9c8d55d3-7132-4f36-bc2d-c4ae49efb1f4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-18T17:24:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9c8d55d3-7132-4f36-bc2d-c4ae49efb1f4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-18T17:24:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9c8d55d3-7132-4f36-bc2d-c4ae49efb1f4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-18T17:24:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9c8d55d3-7132-4f36-bc2d-c4ae49efb1f4","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-18T17:24:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"744f7b64-5098-4267-8c66-d582ffc94909","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:48052","PortSpecifier":{"PortValue":48052}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"744f7b64-5098-4267-8c66-d582ffc94909","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-497f21.apps.895c59d4-5776-4983-8d76-ee2580b4b8e8.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-18T17:24:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"744f7b64-5098-4267-8c66-d582ffc94909","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:48052","PortSpecifier":{"PortValue":48052}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784395468,"nanos":289164761},"http":{"id":"744f7b64-5098-4267-8c66-d582ffc94909","method":"POST","headers":{":authority":"e2e-shared-b-497f21.apps.895c59d4-5776-4983-8d76-ee2580b4b8e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T17:24:28Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"744f7b64-5098-4267-8c66-d582ffc94909","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-18T17:24:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"744f7b64-5098-4267-8c66-d582ffc94909","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f1b895b9-520b-4c73-9653-1fa79c8c3661","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6e438633-d12a-44b1-b014-279cffb6963d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ee2580b4b8e8"]}} {"level":"debug","ts":"2026-07-18T17:24:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"744f7b64-5098-4267-8c66-d582ffc94909","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ee2580b4b8e8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6e438633-d12a-44b1-b014-279cffb6963d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f1b895b9-520b-4c73-9653-1fa79c8c3661","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-497f21.apps.895c59d4-5776-4983-8d76-ee2580b4b8e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T17:24:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"744f7b64-5098-4267-8c66-d582ffc94909","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T17:24:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"744f7b64-5098-4267-8c66-d582ffc94909","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T17:24:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"744f7b64-5098-4267-8c66-d582ffc94909","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-497f21/sub-test-model-497f21\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-497f21/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T17:24:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"744f7b64-5098-4267-8c66-d582ffc94909","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-18T17:24:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"744f7b64-5098-4267-8c66-d582ffc94909","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-18T17:24:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"744f7b64-5098-4267-8c66-d582ffc94909","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-18T17:24:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"744f7b64-5098-4267-8c66-d582ffc94909","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-18T17:24:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"744f7b64-5098-4267-8c66-d582ffc94909","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-18T17:24:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a2732153-7884-4e53-9ed6-a08420244fed","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:60446","PortSpecifier":{"PortValue":60446}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a2732153-7884-4e53-9ed6-a08420244fed","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-78538d.apps.895c59d4-5776-4983-8d76-ee2580b4b8e8.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-18T17:24:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a2732153-7884-4e53-9ed6-a08420244fed","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:60446","PortSpecifier":{"PortValue":60446}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784395468,"nanos":327219925},"http":{"id":"a2732153-7884-4e53-9ed6-a08420244fed","method":"POST","headers":{":authority":"e2e-shared-a-78538d.apps.895c59d4-5776-4983-8d76-ee2580b4b8e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T17:24:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a2732153-7884-4e53-9ed6-a08420244fed","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Y9xgkJeEjvfZuLbf_WO5LJTg9AwBkrxadTUjrqbZbIMhzSm0yJILNHvF5L7P"} {"level":"debug","ts":"2026-07-18T17:24:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a2732153-7884-4e53-9ed6-a08420244fed","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-78538d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Y9xgkJeEjvfZuLbf_WO5LJTg9AwBkrxadTUjrqbZbIMhzSm0yJILNHvF5L7P\"}"} {"level":"debug","ts":"2026-07-18T17:24:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a2732153-7884-4e53-9ed6-a08420244fed","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-78538d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6b6d7db0-8c6e-4c05-a26f-270827404e89","keyName":"e2e-sub-iso-617b48","subscription":"e2e-shared-sub-c97101","tenant":"e2e-shared-a-78538d","userId":"6b6d7db0-8c6e-4c05-a26f-270827404e89","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-18T17:24:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a2732153-7884-4e53-9ed6-a08420244fed","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T17:24:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a2732153-7884-4e53-9ed6-a08420244fed","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T17:24:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a2732153-7884-4e53-9ed6-a08420244fed","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T17:24:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a2732153-7884-4e53-9ed6-a08420244fed","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-78538d/sub-test-model-78538d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-78538d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T17:24:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a2732153-7884-4e53-9ed6-a08420244fed","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-18T17:24:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a2732153-7884-4e53-9ed6-a08420244fed","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-c97101"} {"level":"debug","ts":"2026-07-18T17:24:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a2732153-7884-4e53-9ed6-a08420244fed","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-18T17:24:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a2732153-7884-4e53-9ed6-a08420244fed","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-18T17:24:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a2732153-7884-4e53-9ed6-a08420244fed","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-18T17:24:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a2732153-7884-4e53-9ed6-a08420244fed","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-18T17:24:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2a947ae6-d7f4-403c-a291-e84406783b03","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:48068","PortSpecifier":{"PortValue":48068}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2a947ae6-d7f4-403c-a291-e84406783b03","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-497f21.apps.895c59d4-5776-4983-8d76-ee2580b4b8e8.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-18T17:24:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2a947ae6-d7f4-403c-a291-e84406783b03","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:48068","PortSpecifier":{"PortValue":48068}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784395468,"nanos":359819941},"http":{"id":"2a947ae6-d7f4-403c-a291-e84406783b03","method":"POST","headers":{":authority":"e2e-shared-b-497f21.apps.895c59d4-5776-4983-8d76-ee2580b4b8e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T17:24:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2a947ae6-d7f4-403c-a291-e84406783b03","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-HrSKsHdT5kliW6WI_bLbqvPSpPYrtqNk2Dpd2rBy8JIyvJKa31Oejw6UopdC"} {"level":"debug","ts":"2026-07-18T17:24:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2a947ae6-d7f4-403c-a291-e84406783b03","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-497f21.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-HrSKsHdT5kliW6WI_bLbqvPSpPYrtqNk2Dpd2rBy8JIyvJKa31Oejw6UopdC\"}"} {"level":"debug","ts":"2026-07-18T17:24:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2a947ae6-d7f4-403c-a291-e84406783b03","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-497f21.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"631578d6-3056-4d1d-aa4f-776189a023b6","keyName":"e2e-sub-iso-ba366e","subscription":"e2e-shared-sub-c97101","tenant":"e2e-shared-b-497f21","userId":"631578d6-3056-4d1d-aa4f-776189a023b6","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-18T17:24:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2a947ae6-d7f4-403c-a291-e84406783b03","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T17:24:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2a947ae6-d7f4-403c-a291-e84406783b03","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T17:24:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2a947ae6-d7f4-403c-a291-e84406783b03","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T17:24:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2a947ae6-d7f4-403c-a291-e84406783b03","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-497f21/sub-test-model-497f21\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-497f21/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T17:24:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2a947ae6-d7f4-403c-a291-e84406783b03","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-18T17:24:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2a947ae6-d7f4-403c-a291-e84406783b03","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-18T17:24:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2a947ae6-d7f4-403c-a291-e84406783b03","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-c97101"} {"level":"debug","ts":"2026-07-18T17:24:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2a947ae6-d7f4-403c-a291-e84406783b03","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-18T17:24:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2a947ae6-d7f4-403c-a291-e84406783b03","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-18T17:24:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2a947ae6-d7f4-403c-a291-e84406783b03","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-18T17:24:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0c014f029bd221da15ec954a4f5a0f69aba5b7d1216507787b6905ef731ff215"} {"level":"info","ts":"2026-07-18T17:24:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/015c9cc290ecdf7de3c9b108b2aaa2d0b8827bc03e39b8977906d9b41479d386"} {"level":"info","ts":"2026-07-18T17:24:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/17116ee24609288803998c6c7286129dd64bebc047c9d29f431211684e283625"} {"level":"info","ts":"2026-07-18T17:24:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/175e4cdc26d29960ce6d8bc2fba411fcbffab1591b5450037d0d5fa45b78d0bd"} {"level":"info","ts":"2026-07-18T17:24:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4f8b553bff07f64cf5c066e5b917e725877c25113999fed20ae0b032df5c7271"} {"level":"info","ts":"2026-07-18T17:24:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/42e282d5a644cba50a26757fee2bd85faafd4b2f4a8daba4f1edb86171fc174e"} {"level":"info","ts":"2026-07-18T17:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/00da27777581d4c8435848043bc93d90a9fc2159cae93fd3893ddfcac5211202"} {"level":"info","ts":"2026-07-18T17:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f750141328196ac788f42b6513d38861fec75aecfd4e8f883b5a6cc1e38c4d0b"} {"level":"info","ts":"2026-07-18T17:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a308c06619b88014342d5e31c2fdd5bc331c96f7224f5f9d50bc0fb194f6a8ce"} {"level":"info","ts":"2026-07-18T17:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/067d4eb0919195807c996cd7d2a1d2c436fb60d6b843fc649b7ec5097a591ac2"} {"level":"info","ts":"2026-07-18T17:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b8fe1f0074091d4476c9d0cdef210c678dea2850cddb9b5b0e0405256b63a46a"} {"level":"info","ts":"2026-07-18T17:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/204688c86718d36be4c020b69aef1496396eb1a0cb425f719468b2f9d613f8be"} {"level":"info","ts":"2026-07-18T17:24:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f16474fc63eee461fd57a552fa9b8d6ea39b61825fd637fd55ab392846ecfb77"} {"level":"info","ts":"2026-07-18T17:24:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/396f2ac7e57e386353ac14e93e44bf55ebaa23c330ef08bbf9bae423c9acbaa3"} {"level":"info","ts":"2026-07-18T17:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/00cc40fc42e5ca46b4aef101e22ec2455e872b0eb6b6821b18ae0c3e69a75472"} {"level":"info","ts":"2026-07-18T17:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aaa8461f25ffb323f1e10b382f6de0e52765d1698b8e96dcb8be38be15f055f2"} {"level":"info","ts":"2026-07-18T17:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/77adaddda22bbd4b3708a1080d8f15186449d207733819b59acbd9fc046e5aa0"} {"level":"info","ts":"2026-07-18T17:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0"} {"level":"info","ts":"2026-07-18T17:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/18136a7ea3224fd4fe8d635f843eeb7edcb7aef1c349914ac7d6844a9ff43eff"} {"level":"info","ts":"2026-07-18T17:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/86d39625ca338ecb8918bb786c949b4b1855b4922bdd330a29b1150c3099a6c4"} {"level":"info","ts":"2026-07-18T17:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a89e498b1a0238180adfd7933935d4a23625d79f7fd777c6d44b54556f5ba26c"} {"level":"info","ts":"2026-07-18T17:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eeec35435dae4d11ef4448e7497f2507b94c577c6d026a60914fe8dd7dfc631a"} {"level":"info","ts":"2026-07-18T17:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4"} {"level":"info","ts":"2026-07-18T17:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/41d5f22e86e31b445a00fc9e48d273ce757f7dfe5d37d5f39725e3b256badbfe"} {"level":"debug","ts":"2026-07-18T17:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"015c9cc290ecdf7de3c9b108b2aaa2d0b8827bc03e39b8977906d9b41479d386","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:25:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:25:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"015c9cc290ecdf7de3c9b108b2aaa2d0b8827bc03e39b8977906d9b41479d386","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"015c9cc290ecdf7de3c9b108b2aaa2d0b8827bc03e39b8977906d9b41479d386","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"015c9cc290ecdf7de3c9b108b2aaa2d0b8827bc03e39b8977906d9b41479d386","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T17:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/015c9cc290ecdf7de3c9b108b2aaa2d0b8827bc03e39b8977906d9b41479d386"} {"level":"debug","ts":"2026-07-18T17:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"015c9cc290ecdf7de3c9b108b2aaa2d0b8827bc03e39b8977906d9b41479d386","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T17:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/015c9cc290ecdf7de3c9b108b2aaa2d0b8827bc03e39b8977906d9b41479d386"} {"level":"debug","ts":"2026-07-18T17:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"015c9cc290ecdf7de3c9b108b2aaa2d0b8827bc03e39b8977906d9b41479d386","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:25:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:25:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["015c9cc290ecdf7de3c9b108b2aaa2d0b8827bc03e39b8977906d9b41479d386"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"015c9cc290ecdf7de3c9b108b2aaa2d0b8827bc03e39b8977906d9b41479d386","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"015c9cc290ecdf7de3c9b108b2aaa2d0b8827bc03e39b8977906d9b41479d386","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T17:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/015c9cc290ecdf7de3c9b108b2aaa2d0b8827bc03e39b8977906d9b41479d386"} {"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a70d9f48c87ea8b30ba1bffa31e30cfe89cdb23282fa47a30b38b5257e030173","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a70d9f48c87ea8b30ba1bffa31e30cfe89cdb23282fa47a30b38b5257e030173","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a70d9f48c87ea8b30ba1bffa31e30cfe89cdb23282fa47a30b38b5257e030173","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a70d9f48c87ea8b30ba1bffa31e30cfe89cdb23282fa47a30b38b5257e030173","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a70d9f48c87ea8b30ba1bffa31e30cfe89cdb23282fa47a30b38b5257e030173"} {"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a70d9f48c87ea8b30ba1bffa31e30cfe89cdb23282fa47a30b38b5257e030173","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a70d9f48c87ea8b30ba1bffa31e30cfe89cdb23282fa47a30b38b5257e030173"} {"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a70d9f48c87ea8b30ba1bffa31e30cfe89cdb23282fa47a30b38b5257e030173","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a70d9f48c87ea8b30ba1bffa31e30cfe89cdb23282fa47a30b38b5257e030173"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a70d9f48c87ea8b30ba1bffa31e30cfe89cdb23282fa47a30b38b5257e030173","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a70d9f48c87ea8b30ba1bffa31e30cfe89cdb23282fa47a30b38b5257e030173","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a70d9f48c87ea8b30ba1bffa31e30cfe89cdb23282fa47a30b38b5257e030173","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"319f7a57db3730e6ce65097705196fc174d7885777ceb595a5b12681fd290412","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a70d9f48c87ea8b30ba1bffa31e30cfe89cdb23282fa47a30b38b5257e030173"} {"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"319f7a57db3730e6ce65097705196fc174d7885777ceb595a5b12681fd290412","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a70d9f48c87ea8b30ba1bffa31e30cfe89cdb23282fa47a30b38b5257e030173","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a70d9f48c87ea8b30ba1bffa31e30cfe89cdb23282fa47a30b38b5257e030173"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a70d9f48c87ea8b30ba1bffa31e30cfe89cdb23282fa47a30b38b5257e030173","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"319f7a57db3730e6ce65097705196fc174d7885777ceb595a5b12681fd290412","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/319f7a57db3730e6ce65097705196fc174d7885777ceb595a5b12681fd290412"} {"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"319f7a57db3730e6ce65097705196fc174d7885777ceb595a5b12681fd290412","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a70d9f48c87ea8b30ba1bffa31e30cfe89cdb23282fa47a30b38b5257e030173","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a70d9f48c87ea8b30ba1bffa31e30cfe89cdb23282fa47a30b38b5257e030173"} {"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a70d9f48c87ea8b30ba1bffa31e30cfe89cdb23282fa47a30b38b5257e030173","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"319f7a57db3730e6ce65097705196fc174d7885777ceb595a5b12681fd290412","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a70d9f48c87ea8b30ba1bffa31e30cfe89cdb23282fa47a30b38b5257e030173","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a70d9f48c87ea8b30ba1bffa31e30cfe89cdb23282fa47a30b38b5257e030173"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a70d9f48c87ea8b30ba1bffa31e30cfe89cdb23282fa47a30b38b5257e030173","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a70d9f48c87ea8b30ba1bffa31e30cfe89cdb23282fa47a30b38b5257e030173","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a70d9f48c87ea8b30ba1bffa31e30cfe89cdb23282fa47a30b38b5257e030173"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/319f7a57db3730e6ce65097705196fc174d7885777ceb595a5b12681fd290412"} {"level":"error","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a70d9f48c87ea8b30ba1bffa31e30cfe89cdb23282fa47a30b38b5257e030173","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a70d9f48c87ea8b30ba1bffa31e30cfe89cdb23282fa47a30b38b5257e030173\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"319f7a57db3730e6ce65097705196fc174d7885777ceb595a5b12681fd290412","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["319f7a57db3730e6ce65097705196fc174d7885777ceb595a5b12681fd290412"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a70d9f48c87ea8b30ba1bffa31e30cfe89cdb23282fa47a30b38b5257e030173"} {"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"319f7a57db3730e6ce65097705196fc174d7885777ceb595a5b12681fd290412","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a70d9f48c87ea8b30ba1bffa31e30cfe89cdb23282fa47a30b38b5257e030173","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"319f7a57db3730e6ce65097705196fc174d7885777ceb595a5b12681fd290412","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"319f7a57db3730e6ce65097705196fc174d7885777ceb595a5b12681fd290412","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eeec35435dae4d11ef4448e7497f2507b94c577c6d026a60914fe8dd7dfc631a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/319f7a57db3730e6ce65097705196fc174d7885777ceb595a5b12681fd290412"} {"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eeec35435dae4d11ef4448e7497f2507b94c577c6d026a60914fe8dd7dfc631a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"319f7a57db3730e6ce65097705196fc174d7885777ceb595a5b12681fd290412","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["319f7a57db3730e6ce65097705196fc174d7885777ceb595a5b12681fd290412"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"319f7a57db3730e6ce65097705196fc174d7885777ceb595a5b12681fd290412","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eeec35435dae4d11ef4448e7497f2507b94c577c6d026a60914fe8dd7dfc631a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eeec35435dae4d11ef4448e7497f2507b94c577c6d026a60914fe8dd7dfc631a"} {"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eeec35435dae4d11ef4448e7497f2507b94c577c6d026a60914fe8dd7dfc631a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"319f7a57db3730e6ce65097705196fc174d7885777ceb595a5b12681fd290412","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/319f7a57db3730e6ce65097705196fc174d7885777ceb595a5b12681fd290412"} {"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"319f7a57db3730e6ce65097705196fc174d7885777ceb595a5b12681fd290412","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eeec35435dae4d11ef4448e7497f2507b94c577c6d026a60914fe8dd7dfc631a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"319f7a57db3730e6ce65097705196fc174d7885777ceb595a5b12681fd290412","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["319f7a57db3730e6ce65097705196fc174d7885777ceb595a5b12681fd290412"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eeec35435dae4d11ef4448e7497f2507b94c577c6d026a60914fe8dd7dfc631a"} {"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"319f7a57db3730e6ce65097705196fc174d7885777ceb595a5b12681fd290412","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"319f7a57db3730e6ce65097705196fc174d7885777ceb595a5b12681fd290412","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"319f7a57db3730e6ce65097705196fc174d7885777ceb595a5b12681fd290412","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"319f7a57db3730e6ce65097705196fc174d7885777ceb595a5b12681fd290412","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eeec35435dae4d11ef4448e7497f2507b94c577c6d026a60914fe8dd7dfc631a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eeec35435dae4d11ef4448e7497f2507b94c577c6d026a60914fe8dd7dfc631a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/319f7a57db3730e6ce65097705196fc174d7885777ceb595a5b12681fd290412"} {"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eeec35435dae4d11ef4448e7497f2507b94c577c6d026a60914fe8dd7dfc631a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"319f7a57db3730e6ce65097705196fc174d7885777ceb595a5b12681fd290412","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eeec35435dae4d11ef4448e7497f2507b94c577c6d026a60914fe8dd7dfc631a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"319f7a57db3730e6ce65097705196fc174d7885777ceb595a5b12681fd290412","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/319f7a57db3730e6ce65097705196fc174d7885777ceb595a5b12681fd290412"} {"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eeec35435dae4d11ef4448e7497f2507b94c577c6d026a60914fe8dd7dfc631a"} {"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"319f7a57db3730e6ce65097705196fc174d7885777ceb595a5b12681fd290412","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["319f7a57db3730e6ce65097705196fc174d7885777ceb595a5b12681fd290412"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"319f7a57db3730e6ce65097705196fc174d7885777ceb595a5b12681fd290412","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"319f7a57db3730e6ce65097705196fc174d7885777ceb595a5b12681fd290412","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"970d0bf55ef1001616bca803cad8a27b1d07c2f5842ecf0d6c58cc34cf2e48a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"970d0bf55ef1001616bca803cad8a27b1d07c2f5842ecf0d6c58cc34cf2e48a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"970d0bf55ef1001616bca803cad8a27b1d07c2f5842ecf0d6c58cc34cf2e48a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/319f7a57db3730e6ce65097705196fc174d7885777ceb595a5b12681fd290412"} {"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"970d0bf55ef1001616bca803cad8a27b1d07c2f5842ecf0d6c58cc34cf2e48a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"970d0bf55ef1001616bca803cad8a27b1d07c2f5842ecf0d6c58cc34cf2e48a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"970d0bf55ef1001616bca803cad8a27b1d07c2f5842ecf0d6c58cc34cf2e48a4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/970d0bf55ef1001616bca803cad8a27b1d07c2f5842ecf0d6c58cc34cf2e48a4"} {"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"970d0bf55ef1001616bca803cad8a27b1d07c2f5842ecf0d6c58cc34cf2e48a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["970d0bf55ef1001616bca803cad8a27b1d07c2f5842ecf0d6c58cc34cf2e48a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4"} {"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"970d0bf55ef1001616bca803cad8a27b1d07c2f5842ecf0d6c58cc34cf2e48a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"970d0bf55ef1001616bca803cad8a27b1d07c2f5842ecf0d6c58cc34cf2e48a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/970d0bf55ef1001616bca803cad8a27b1d07c2f5842ecf0d6c58cc34cf2e48a4"} {"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"970d0bf55ef1001616bca803cad8a27b1d07c2f5842ecf0d6c58cc34cf2e48a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"970d0bf55ef1001616bca803cad8a27b1d07c2f5842ecf0d6c58cc34cf2e48a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["970d0bf55ef1001616bca803cad8a27b1d07c2f5842ecf0d6c58cc34cf2e48a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4"} {"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"970d0bf55ef1001616bca803cad8a27b1d07c2f5842ecf0d6c58cc34cf2e48a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bdde9dbbe634215d8040405a0c1403dbd270010373b9158acd5c3fed658afe2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bdde9dbbe634215d8040405a0c1403dbd270010373b9158acd5c3fed658afe2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/970d0bf55ef1001616bca803cad8a27b1d07c2f5842ecf0d6c58cc34cf2e48a4"} {"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"970d0bf55ef1001616bca803cad8a27b1d07c2f5842ecf0d6c58cc34cf2e48a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bdde9dbbe634215d8040405a0c1403dbd270010373b9158acd5c3fed658afe2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bdde9dbbe634215d8040405a0c1403dbd270010373b9158acd5c3fed658afe2"} {"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bdde9dbbe634215d8040405a0c1403dbd270010373b9158acd5c3fed658afe2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bdde9dbbe634215d8040405a0c1403dbd270010373b9158acd5c3fed658afe2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5bdde9dbbe634215d8040405a0c1403dbd270010373b9158acd5c3fed658afe2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4"} {"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bdde9dbbe634215d8040405a0c1403dbd270010373b9158acd5c3fed658afe2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5bdde9dbbe634215d8040405a0c1403dbd270010373b9158acd5c3fed658afe2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"06b53039ab0ca0c20f0b6df937434eb6528cfe7172679e2ef7b973025182c5c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/970d0bf55ef1001616bca803cad8a27b1d07c2f5842ecf0d6c58cc34cf2e48a4"} {"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"06b53039ab0ca0c20f0b6df937434eb6528cfe7172679e2ef7b973025182c5c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab43823010c10cebabc0c4e4dcc942ff542d4524afa0ea0323a7c515a8329a3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab43823010c10cebabc0c4e4dcc942ff542d4524afa0ea0323a7c515a8329a3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"06b53039ab0ca0c20f0b6df937434eb6528cfe7172679e2ef7b973025182c5c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab43823010c10cebabc0c4e4dcc942ff542d4524afa0ea0323a7c515a8329a3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab43823010c10cebabc0c4e4dcc942ff542d4524afa0ea0323a7c515a8329a3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"06b53039ab0ca0c20f0b6df937434eb6528cfe7172679e2ef7b973025182c5c5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bdde9dbbe634215d8040405a0c1403dbd270010373b9158acd5c3fed658afe2"} {"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab43823010c10cebabc0c4e4dcc942ff542d4524afa0ea0323a7c515a8329a3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"06b53039ab0ca0c20f0b6df937434eb6528cfe7172679e2ef7b973025182c5c5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4"} {"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"258603dc92ec5bf95a356bb8bc84fda1969d1e56273b46ff66d51020ec4d5fb3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"258603dc92ec5bf95a356bb8bc84fda1969d1e56273b46ff66d51020ec4d5fb3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab43823010c10cebabc0c4e4dcc942ff542d4524afa0ea0323a7c515a8329a3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"06b53039ab0ca0c20f0b6df937434eb6528cfe7172679e2ef7b973025182c5c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06b53039ab0ca0c20f0b6df937434eb6528cfe7172679e2ef7b973025182c5c5"} {"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"06b53039ab0ca0c20f0b6df937434eb6528cfe7172679e2ef7b973025182c5c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"258603dc92ec5bf95a356bb8bc84fda1969d1e56273b46ff66d51020ec4d5fb3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"06b53039ab0ca0c20f0b6df937434eb6528cfe7172679e2ef7b973025182c5c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["06b53039ab0ca0c20f0b6df937434eb6528cfe7172679e2ef7b973025182c5c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab43823010c10cebabc0c4e4dcc942ff542d4524afa0ea0323a7c515a8329a3b"} {"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"06b53039ab0ca0c20f0b6df937434eb6528cfe7172679e2ef7b973025182c5c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"258603dc92ec5bf95a356bb8bc84fda1969d1e56273b46ff66d51020ec4d5fb3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"258603dc92ec5bf95a356bb8bc84fda1969d1e56273b46ff66d51020ec4d5fb3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"06b53039ab0ca0c20f0b6df937434eb6528cfe7172679e2ef7b973025182c5c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"258603dc92ec5bf95a356bb8bc84fda1969d1e56273b46ff66d51020ec4d5fb3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/258603dc92ec5bf95a356bb8bc84fda1969d1e56273b46ff66d51020ec4d5fb3"} {"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"258603dc92ec5bf95a356bb8bc84fda1969d1e56273b46ff66d51020ec4d5fb3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["258603dc92ec5bf95a356bb8bc84fda1969d1e56273b46ff66d51020ec4d5fb3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06b53039ab0ca0c20f0b6df937434eb6528cfe7172679e2ef7b973025182c5c5"} {"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"258603dc92ec5bf95a356bb8bc84fda1969d1e56273b46ff66d51020ec4d5fb3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"258603dc92ec5bf95a356bb8bc84fda1969d1e56273b46ff66d51020ec4d5fb3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/258603dc92ec5bf95a356bb8bc84fda1969d1e56273b46ff66d51020ec4d5fb3"} {"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"258603dc92ec5bf95a356bb8bc84fda1969d1e56273b46ff66d51020ec4d5fb3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab43823010c10cebabc0c4e4dcc942ff542d4524afa0ea0323a7c515a8329a3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ab43823010c10cebabc0c4e4dcc942ff542d4524afa0ea0323a7c515a8329a3b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab43823010c10cebabc0c4e4dcc942ff542d4524afa0ea0323a7c515a8329a3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"175e4cdc26d29960ce6d8bc2fba411fcbffab1591b5450037d0d5fa45b78d0bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/175e4cdc26d29960ce6d8bc2fba411fcbffab1591b5450037d0d5fa45b78d0bd"} {"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"175e4cdc26d29960ce6d8bc2fba411fcbffab1591b5450037d0d5fa45b78d0bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"258603dc92ec5bf95a356bb8bc84fda1969d1e56273b46ff66d51020ec4d5fb3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"06b53039ab0ca0c20f0b6df937434eb6528cfe7172679e2ef7b973025182c5c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab43823010c10cebabc0c4e4dcc942ff542d4524afa0ea0323a7c515a8329a3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"175e4cdc26d29960ce6d8bc2fba411fcbffab1591b5450037d0d5fa45b78d0bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["175e4cdc26d29960ce6d8bc2fba411fcbffab1591b5450037d0d5fa45b78d0bd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"175e4cdc26d29960ce6d8bc2fba411fcbffab1591b5450037d0d5fa45b78d0bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"258603dc92ec5bf95a356bb8bc84fda1969d1e56273b46ff66d51020ec4d5fb3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/258603dc92ec5bf95a356bb8bc84fda1969d1e56273b46ff66d51020ec4d5fb3"} {"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"175e4cdc26d29960ce6d8bc2fba411fcbffab1591b5450037d0d5fa45b78d0bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["175e4cdc26d29960ce6d8bc2fba411fcbffab1591b5450037d0d5fa45b78d0bd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"175e4cdc26d29960ce6d8bc2fba411fcbffab1591b5450037d0d5fa45b78d0bd","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"175e4cdc26d29960ce6d8bc2fba411fcbffab1591b5450037d0d5fa45b78d0bd\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"175e4cdc26d29960ce6d8bc2fba411fcbffab1591b5450037d0d5fa45b78d0bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"175e4cdc26d29960ce6d8bc2fba411fcbffab1591b5450037d0d5fa45b78d0bd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab43823010c10cebabc0c4e4dcc942ff542d4524afa0ea0323a7c515a8329a3b"} {"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"258603dc92ec5bf95a356bb8bc84fda1969d1e56273b46ff66d51020ec4d5fb3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["258603dc92ec5bf95a356bb8bc84fda1969d1e56273b46ff66d51020ec4d5fb3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/175e4cdc26d29960ce6d8bc2fba411fcbffab1591b5450037d0d5fa45b78d0bd"} {"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"258603dc92ec5bf95a356bb8bc84fda1969d1e56273b46ff66d51020ec4d5fb3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"258603dc92ec5bf95a356bb8bc84fda1969d1e56273b46ff66d51020ec4d5fb3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/258603dc92ec5bf95a356bb8bc84fda1969d1e56273b46ff66d51020ec4d5fb3"} {"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f750141328196ac788f42b6513d38861fec75aecfd4e8f883b5a6cc1e38c4d0b"} {"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"258603dc92ec5bf95a356bb8bc84fda1969d1e56273b46ff66d51020ec4d5fb3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f750141328196ac788f42b6513d38861fec75aecfd4e8f883b5a6cc1e38c4d0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f750141328196ac788f42b6513d38861fec75aecfd4e8f883b5a6cc1e38c4d0b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/258603dc92ec5bf95a356bb8bc84fda1969d1e56273b46ff66d51020ec4d5fb3"} {"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f750141328196ac788f42b6513d38861fec75aecfd4e8f883b5a6cc1e38c4d0b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"258603dc92ec5bf95a356bb8bc84fda1969d1e56273b46ff66d51020ec4d5fb3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["258603dc92ec5bf95a356bb8bc84fda1969d1e56273b46ff66d51020ec4d5fb3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f750141328196ac788f42b6513d38861fec75aecfd4e8f883b5a6cc1e38c4d0b"} {"level":"info","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99ffcb5d12592d01495504ba76e208b1ef8c9acbb38a0f84473b0a36cccb4827"} {"level":"info","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"258603dc92ec5bf95a356bb8bc84fda1969d1e56273b46ff66d51020ec4d5fb3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f750141328196ac788f42b6513d38861fec75aecfd4e8f883b5a6cc1e38c4d0b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99ffcb5d12592d01495504ba76e208b1ef8c9acbb38a0f84473b0a36cccb4827","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:25:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:25:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["99ffcb5d12592d01495504ba76e208b1ef8c9acbb38a0f84473b0a36cccb4827"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/258603dc92ec5bf95a356bb8bc84fda1969d1e56273b46ff66d51020ec4d5fb3"} {"level":"info","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99ffcb5d12592d01495504ba76e208b1ef8c9acbb38a0f84473b0a36cccb4827","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"258603dc92ec5bf95a356bb8bc84fda1969d1e56273b46ff66d51020ec4d5fb3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99ffcb5d12592d01495504ba76e208b1ef8c9acbb38a0f84473b0a36cccb4827","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00da27777581d4c8435848043bc93d90a9fc2159cae93fd3893ddfcac5211202","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:25:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:25:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99ffcb5d12592d01495504ba76e208b1ef8c9acbb38a0f84473b0a36cccb4827"} {"level":"info","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00da27777581d4c8435848043bc93d90a9fc2159cae93fd3893ddfcac5211202"} {"level":"info","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00da27777581d4c8435848043bc93d90a9fc2159cae93fd3893ddfcac5211202","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:25:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:25:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0"} {"level":"info","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00da27777581d4c8435848043bc93d90a9fc2159cae93fd3893ddfcac5211202"} {"level":"info","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00da27777581d4c8435848043bc93d90a9fc2159cae93fd3893ddfcac5211202","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:25:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:25:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["00da27777581d4c8435848043bc93d90a9fc2159cae93fd3893ddfcac5211202"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0"} {"level":"info","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00da27777581d4c8435848043bc93d90a9fc2159cae93fd3893ddfcac5211202","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67ca6ea61fb2fa5c186063adf891df2f98bcf97bcd3e30cb990527787db2a218"} {"level":"debug","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:25:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:25:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/773c816ec8afc043553846f347cb0a50dd079d4b8ef6feec5399412f57cb8557"} {"level":"info","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00da27777581d4c8435848043bc93d90a9fc2159cae93fd3893ddfcac5211202"} {"level":"info","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67ca6ea61fb2fa5c186063adf891df2f98bcf97bcd3e30cb990527787db2a218","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:25:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:25:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["67ca6ea61fb2fa5c186063adf891df2f98bcf97bcd3e30cb990527787db2a218"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0"} {"level":"info","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18136a7ea3224fd4fe8d635f843eeb7edcb7aef1c349914ac7d6844a9ff43eff"} {"level":"info","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67ca6ea61fb2fa5c186063adf891df2f98bcf97bcd3e30cb990527787db2a218","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"773c816ec8afc043553846f347cb0a50dd079d4b8ef6feec5399412f57cb8557","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:25:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:25:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["773c816ec8afc043553846f347cb0a50dd079d4b8ef6feec5399412f57cb8557"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/455374c27d9f1fcaf34c0dba17245c7e0a1c4ac81254cef154bee3a2c2e086ef"} {"level":"info","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d32968ea6736064f54bdce5e6a5717ab2487de54745c9083ab155b897a88884"} {"level":"info","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a86fa054434b3912857b415491467c796a24b2ea33671ec3f61208a063bb3fbf"} {"level":"info","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"773c816ec8afc043553846f347cb0a50dd079d4b8ef6feec5399412f57cb8557","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00da27777581d4c8435848043bc93d90a9fc2159cae93fd3893ddfcac5211202","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18136a7ea3224fd4fe8d635f843eeb7edcb7aef1c349914ac7d6844a9ff43eff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:25:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:25:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18136a7ea3224fd4fe8d635f843eeb7edcb7aef1c349914ac7d6844a9ff43eff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67ca6ea61fb2fa5c186063adf891df2f98bcf97bcd3e30cb990527787db2a218"} {"level":"info","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7302e627c677cf40b2435ef7e7edb86c522f082bc7d6066de4328a5b923fcf5c"} {"level":"info","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18136a7ea3224fd4fe8d635f843eeb7edcb7aef1c349914ac7d6844a9ff43eff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"455374c27d9f1fcaf34c0dba17245c7e0a1c4ac81254cef154bee3a2c2e086ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:25:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:25:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["455374c27d9f1fcaf34c0dba17245c7e0a1c4ac81254cef154bee3a2c2e086ef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08e466dca46125e5191076d01e332c228b75ff374520dcc9456bf770e9e550c0"} {"level":"info","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/773c816ec8afc043553846f347cb0a50dd079d4b8ef6feec5399412f57cb8557"} {"level":"info","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a24738226eaaa8affe2828d75b719849d4e90faca7793443ec3ee72361e0a0f8"} {"level":"info","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"455374c27d9f1fcaf34c0dba17245c7e0a1c4ac81254cef154bee3a2c2e086ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d32968ea6736064f54bdce5e6a5717ab2487de54745c9083ab155b897a88884","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:25:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:25:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9d32968ea6736064f54bdce5e6a5717ab2487de54745c9083ab155b897a88884"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18136a7ea3224fd4fe8d635f843eeb7edcb7aef1c349914ac7d6844a9ff43eff"} {"level":"info","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/455374c27d9f1fcaf34c0dba17245c7e0a1c4ac81254cef154bee3a2c2e086ef"} {"level":"info","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d32968ea6736064f54bdce5e6a5717ab2487de54745c9083ab155b897a88884","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a86fa054434b3912857b415491467c796a24b2ea33671ec3f61208a063bb3fbf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:25:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:25:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a86fa054434b3912857b415491467c796a24b2ea33671ec3f61208a063bb3fbf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d32968ea6736064f54bdce5e6a5717ab2487de54745c9083ab155b897a88884"} {"level":"info","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a86fa054434b3912857b415491467c796a24b2ea33671ec3f61208a063bb3fbf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67ca6ea61fb2fa5c186063adf891df2f98bcf97bcd3e30cb990527787db2a218","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7302e627c677cf40b2435ef7e7edb86c522f082bc7d6066de4328a5b923fcf5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:25:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:25:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7302e627c677cf40b2435ef7e7edb86c522f082bc7d6066de4328a5b923fcf5c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a86fa054434b3912857b415491467c796a24b2ea33671ec3f61208a063bb3fbf"} {"level":"info","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7302e627c677cf40b2435ef7e7edb86c522f082bc7d6066de4328a5b923fcf5c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08e466dca46125e5191076d01e332c228b75ff374520dcc9456bf770e9e550c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:25:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:25:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["08e466dca46125e5191076d01e332c228b75ff374520dcc9456bf770e9e550c0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7302e627c677cf40b2435ef7e7edb86c522f082bc7d6066de4328a5b923fcf5c"} {"level":"info","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08e466dca46125e5191076d01e332c228b75ff374520dcc9456bf770e9e550c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"773c816ec8afc043553846f347cb0a50dd079d4b8ef6feec5399412f57cb8557","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a24738226eaaa8affe2828d75b719849d4e90faca7793443ec3ee72361e0a0f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:25:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:25:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a24738226eaaa8affe2828d75b719849d4e90faca7793443ec3ee72361e0a0f8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08e466dca46125e5191076d01e332c228b75ff374520dcc9456bf770e9e550c0"} {"level":"info","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a24738226eaaa8affe2828d75b719849d4e90faca7793443ec3ee72361e0a0f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18136a7ea3224fd4fe8d635f843eeb7edcb7aef1c349914ac7d6844a9ff43eff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"455374c27d9f1fcaf34c0dba17245c7e0a1c4ac81254cef154bee3a2c2e086ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d32968ea6736064f54bdce5e6a5717ab2487de54745c9083ab155b897a88884","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a86fa054434b3912857b415491467c796a24b2ea33671ec3f61208a063bb3fbf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7302e627c677cf40b2435ef7e7edb86c522f082bc7d6066de4328a5b923fcf5c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08e466dca46125e5191076d01e332c228b75ff374520dcc9456bf770e9e550c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a24738226eaaa8affe2828d75b719849d4e90faca7793443ec3ee72361e0a0f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:25:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:25:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a24738226eaaa8affe2828d75b719849d4e90faca7793443ec3ee72361e0a0f8"} {"level":"info","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a24738226eaaa8affe2828d75b719849d4e90faca7793443ec3ee72361e0a0f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a24738226eaaa8affe2828d75b719849d4e90faca7793443ec3ee72361e0a0f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a24738226eaaa8affe2828d75b719849d4e90faca7793443ec3ee72361e0a0f8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a24738226eaaa8affe2828d75b719849d4e90faca7793443ec3ee72361e0a0f8"} {"level":"debug","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a24738226eaaa8affe2828d75b719849d4e90faca7793443ec3ee72361e0a0f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:25:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:25:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a24738226eaaa8affe2828d75b719849d4e90faca7793443ec3ee72361e0a0f8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a24738226eaaa8affe2828d75b719849d4e90faca7793443ec3ee72361e0a0f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a24738226eaaa8affe2828d75b719849d4e90faca7793443ec3ee72361e0a0f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:25:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:25:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a24738226eaaa8affe2828d75b719849d4e90faca7793443ec3ee72361e0a0f8"} {"level":"info","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a24738226eaaa8affe2828d75b719849d4e90faca7793443ec3ee72361e0a0f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a24738226eaaa8affe2828d75b719849d4e90faca7793443ec3ee72361e0a0f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:25:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:25:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a24738226eaaa8affe2828d75b719849d4e90faca7793443ec3ee72361e0a0f8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a24738226eaaa8affe2828d75b719849d4e90faca7793443ec3ee72361e0a0f8"} {"level":"info","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a24738226eaaa8affe2828d75b719849d4e90faca7793443ec3ee72361e0a0f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a24738226eaaa8affe2828d75b719849d4e90faca7793443ec3ee72361e0a0f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:25:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:25:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a24738226eaaa8affe2828d75b719849d4e90faca7793443ec3ee72361e0a0f8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a24738226eaaa8affe2828d75b719849d4e90faca7793443ec3ee72361e0a0f8"} {"level":"error","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a24738226eaaa8affe2828d75b719849d4e90faca7793443ec3ee72361e0a0f8","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a24738226eaaa8affe2828d75b719849d4e90faca7793443ec3ee72361e0a0f8\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a24738226eaaa8affe2828d75b719849d4e90faca7793443ec3ee72361e0a0f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a24738226eaaa8affe2828d75b719849d4e90faca7793443ec3ee72361e0a0f8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T17:25:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b033f62f-4deb-4e63-a19c-5de96cf918d0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:36028","PortSpecifier":{"PortValue":36028}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b033f62f-4deb-4e63-a19c-5de96cf918d0","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-78538d.apps.895c59d4-5776-4983-8d76-ee2580b4b8e8.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-18T17:25:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b033f62f-4deb-4e63-a19c-5de96cf918d0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:36028","PortSpecifier":{"PortValue":36028}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784395532,"nanos":493613346},"http":{"id":"b033f62f-4deb-4e63-a19c-5de96cf918d0","method":"POST","headers":{":authority":"e2e-shared-a-78538d.apps.895c59d4-5776-4983-8d76-ee2580b4b8e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T17:25:32Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b033f62f-4deb-4e63-a19c-5de96cf918d0","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-18T17:25:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b033f62f-4deb-4e63-a19c-5de96cf918d0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f1b895b9-520b-4c73-9653-1fa79c8c3661","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6e438633-d12a-44b1-b014-279cffb6963d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ee2580b4b8e8"]}} {"level":"debug","ts":"2026-07-18T17:25:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b033f62f-4deb-4e63-a19c-5de96cf918d0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ee2580b4b8e8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6e438633-d12a-44b1-b014-279cffb6963d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f1b895b9-520b-4c73-9653-1fa79c8c3661","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"175e4cdc26d29960ce6d8bc2fba411fcbffab1591b5450037d0d5fa45b78d0bd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-78538d.apps.895c59d4-5776-4983-8d76-ee2580b4b8e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T17:25:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b033f62f-4deb-4e63-a19c-5de96cf918d0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T17:25:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b033f62f-4deb-4e63-a19c-5de96cf918d0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T17:25:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b033f62f-4deb-4e63-a19c-5de96cf918d0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-78538d/rate-test-model-78538d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-78538d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T17:25:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b033f62f-4deb-4e63-a19c-5de96cf918d0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-18T17:25:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b033f62f-4deb-4e63-a19c-5de96cf918d0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-18T17:25:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b033f62f-4deb-4e63-a19c-5de96cf918d0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-18T17:25:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b033f62f-4deb-4e63-a19c-5de96cf918d0","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-18T17:25:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b033f62f-4deb-4e63-a19c-5de96cf918d0","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-18T17:25:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a898ebd0-9013-4019-8378-2fb99ad68db8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:53632","PortSpecifier":{"PortValue":53632}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a898ebd0-9013-4019-8378-2fb99ad68db8","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-497f21.apps.895c59d4-5776-4983-8d76-ee2580b4b8e8.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-18T17:25:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a898ebd0-9013-4019-8378-2fb99ad68db8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:53632","PortSpecifier":{"PortValue":53632}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784395532,"nanos":539734516},"http":{"id":"a898ebd0-9013-4019-8378-2fb99ad68db8","method":"POST","headers":{":authority":"e2e-shared-b-497f21.apps.895c59d4-5776-4983-8d76-ee2580b4b8e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T17:25:32Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a898ebd0-9013-4019-8378-2fb99ad68db8","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-18T17:25:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a898ebd0-9013-4019-8378-2fb99ad68db8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f1b895b9-520b-4c73-9653-1fa79c8c3661","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6e438633-d12a-44b1-b014-279cffb6963d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ee2580b4b8e8"]}} {"level":"debug","ts":"2026-07-18T17:25:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a898ebd0-9013-4019-8378-2fb99ad68db8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ee2580b4b8e8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6e438633-d12a-44b1-b014-279cffb6963d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f1b895b9-520b-4c73-9653-1fa79c8c3661","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-497f21.apps.895c59d4-5776-4983-8d76-ee2580b4b8e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T17:25:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a898ebd0-9013-4019-8378-2fb99ad68db8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T17:25:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a898ebd0-9013-4019-8378-2fb99ad68db8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T17:25:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a898ebd0-9013-4019-8378-2fb99ad68db8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-497f21/rate-test-model-497f21\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-497f21/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T17:25:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a898ebd0-9013-4019-8378-2fb99ad68db8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-18T17:25:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a898ebd0-9013-4019-8378-2fb99ad68db8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-18T17:25:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a898ebd0-9013-4019-8378-2fb99ad68db8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-18T17:25:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a898ebd0-9013-4019-8378-2fb99ad68db8","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-18T17:25:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a898ebd0-9013-4019-8378-2fb99ad68db8","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-18T17:25:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4659bbbc-0eb6-4d2e-a86e-3f9632aaab92","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:36030","PortSpecifier":{"PortValue":36030}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4659bbbc-0eb6-4d2e-a86e-3f9632aaab92","method":"POST","path":"/ai-tenant-e2e-shared-a-78538d/rate-test-model-78538d/v1/completions","host":"e2e-shared-a-78538d.apps.895c59d4-5776-4983-8d76-ee2580b4b8e8.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-18T17:25:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4659bbbc-0eb6-4d2e-a86e-3f9632aaab92","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:36030","PortSpecifier":{"PortValue":36030}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784395532,"nanos":580203604},"http":{"id":"4659bbbc-0eb6-4d2e-a86e-3f9632aaab92","method":"POST","headers":{":authority":"e2e-shared-a-78538d.apps.895c59d4-5776-4983-8d76-ee2580b4b8e8.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-78538d/rate-test-model-78538d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T17:25:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4659bbbc-0eb6-4d2e-a86e-3f9632aaab92","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-LNQ8eNUSqOrRY3UU_eOAAZ5E6YVMFHa4Svzs6RzOcPombHu2ugDNxvA4w0gW"} {"level":"debug","ts":"2026-07-18T17:25:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4659bbbc-0eb6-4d2e-a86e-3f9632aaab92","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-78538d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-LNQ8eNUSqOrRY3UU_eOAAZ5E6YVMFHa4Svzs6RzOcPombHu2ugDNxvA4w0gW\"}"} {"level":"debug","ts":"2026-07-18T17:25:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4659bbbc-0eb6-4d2e-a86e-3f9632aaab92","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-78538d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"39da57b0-7915-4a35-832f-4a770a3fe9d8","keyName":"e2e-rate-a-992623","subscription":"e2e-rate-iso-a-992623","tenant":"e2e-shared-a-78538d","userId":"39da57b0-7915-4a35-832f-4a770a3fe9d8","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-18T17:25:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4659bbbc-0eb6-4d2e-a86e-3f9632aaab92","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-78538d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-78538d/rate-test-model-78538d\",\"requestedSubscription\":\"e2e-rate-iso-a-992623\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-18T17:25:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4659bbbc-0eb6-4d2e-a86e-3f9632aaab92","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-78538d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-78538d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-992623","namespace":"ai-tenant-e2e-shared-a-78538d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-78538d/rate-test-model-78538d"}} {"level":"debug","ts":"2026-07-18T17:25:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4659bbbc-0eb6-4d2e-a86e-3f9632aaab92","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T17:25:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4659bbbc-0eb6-4d2e-a86e-3f9632aaab92","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T17:25:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4659bbbc-0eb6-4d2e-a86e-3f9632aaab92","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T17:25:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4659bbbc-0eb6-4d2e-a86e-3f9632aaab92","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-78538d/rate-test-model-78538d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-78538d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T17:25:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4659bbbc-0eb6-4d2e-a86e-3f9632aaab92","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T17:25:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4659bbbc-0eb6-4d2e-a86e-3f9632aaab92","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-18T17:25:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4659bbbc-0eb6-4d2e-a86e-3f9632aaab92","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-992623"} {"level":"debug","ts":"2026-07-18T17:25:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4659bbbc-0eb6-4d2e-a86e-3f9632aaab92","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-18T17:25:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4659bbbc-0eb6-4d2e-a86e-3f9632aaab92","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"39da57b0-7915-4a35-832f-4a770a3fe9d8","keyName":"e2e-rate-a-992623","selected_subscription":"e2e-rate-iso-a-992623","selected_subscription_key":"ai-tenant-e2e-shared-a-78538d/e2e-rate-iso-a-992623@ai-tenant-e2e-shared-a-78538d/rate-test-model-78538d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-78538d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-992623","namespace":"ai-tenant-e2e-shared-a-78538d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-78538d/rate-test-model-78538d"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-18T17:25:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4659bbbc-0eb6-4d2e-a86e-3f9632aaab92","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-18T17:25:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4659bbbc-0eb6-4d2e-a86e-3f9632aaab92","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-18T17:25:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3966de29-1c27-489e-b0f2-e06cbbba7e93","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:36042","PortSpecifier":{"PortValue":36042}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3966de29-1c27-489e-b0f2-e06cbbba7e93","method":"POST","path":"/ai-tenant-e2e-shared-a-78538d/rate-test-model-78538d/v1/completions","host":"e2e-shared-a-78538d.apps.895c59d4-5776-4983-8d76-ee2580b4b8e8.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-18T17:25:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3966de29-1c27-489e-b0f2-e06cbbba7e93","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:36042","PortSpecifier":{"PortValue":36042}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784395533,"nanos":645101148},"http":{"id":"3966de29-1c27-489e-b0f2-e06cbbba7e93","method":"POST","headers":{":authority":"e2e-shared-a-78538d.apps.895c59d4-5776-4983-8d76-ee2580b4b8e8.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-78538d/rate-test-model-78538d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T17:25:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3966de29-1c27-489e-b0f2-e06cbbba7e93","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-LNQ8eNUSqOrRY3UU_eOAAZ5E6YVMFHa4Svzs6RzOcPombHu2ugDNxvA4w0gW"} {"level":"debug","ts":"2026-07-18T17:25:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3966de29-1c27-489e-b0f2-e06cbbba7e93","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-78538d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-LNQ8eNUSqOrRY3UU_eOAAZ5E6YVMFHa4Svzs6RzOcPombHu2ugDNxvA4w0gW\"}"} {"level":"debug","ts":"2026-07-18T17:25:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3966de29-1c27-489e-b0f2-e06cbbba7e93","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-78538d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"39da57b0-7915-4a35-832f-4a770a3fe9d8","keyName":"e2e-rate-a-992623","subscription":"e2e-rate-iso-a-992623","tenant":"e2e-shared-a-78538d","userId":"39da57b0-7915-4a35-832f-4a770a3fe9d8","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-18T17:25:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3966de29-1c27-489e-b0f2-e06cbbba7e93","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-78538d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-78538d/rate-test-model-78538d\",\"requestedSubscription\":\"e2e-rate-iso-a-992623\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-18T17:25:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3966de29-1c27-489e-b0f2-e06cbbba7e93","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-78538d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-78538d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-992623","namespace":"ai-tenant-e2e-shared-a-78538d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-78538d/rate-test-model-78538d"}} {"level":"debug","ts":"2026-07-18T17:25:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3966de29-1c27-489e-b0f2-e06cbbba7e93","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T17:25:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3966de29-1c27-489e-b0f2-e06cbbba7e93","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T17:25:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3966de29-1c27-489e-b0f2-e06cbbba7e93","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T17:25:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3966de29-1c27-489e-b0f2-e06cbbba7e93","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-78538d/rate-test-model-78538d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-78538d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T17:25:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3966de29-1c27-489e-b0f2-e06cbbba7e93","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T17:25:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3966de29-1c27-489e-b0f2-e06cbbba7e93","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-18T17:25:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3966de29-1c27-489e-b0f2-e06cbbba7e93","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-18T17:25:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3966de29-1c27-489e-b0f2-e06cbbba7e93","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-992623"} {"level":"debug","ts":"2026-07-18T17:25:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3966de29-1c27-489e-b0f2-e06cbbba7e93","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"39da57b0-7915-4a35-832f-4a770a3fe9d8","keyName":"e2e-rate-a-992623","selected_subscription":"e2e-rate-iso-a-992623","selected_subscription_key":"ai-tenant-e2e-shared-a-78538d/e2e-rate-iso-a-992623@ai-tenant-e2e-shared-a-78538d/rate-test-model-78538d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-78538d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-992623","namespace":"ai-tenant-e2e-shared-a-78538d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-78538d/rate-test-model-78538d"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-18T17:25:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3966de29-1c27-489e-b0f2-e06cbbba7e93","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-18T17:25:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3966de29-1c27-489e-b0f2-e06cbbba7e93","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-18T17:25:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6aac9a04-978d-40fc-b9d1-491419fe4d2c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:36058","PortSpecifier":{"PortValue":36058}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6aac9a04-978d-40fc-b9d1-491419fe4d2c","method":"POST","path":"/ai-tenant-e2e-shared-a-78538d/rate-test-model-78538d/v1/completions","host":"e2e-shared-a-78538d.apps.895c59d4-5776-4983-8d76-ee2580b4b8e8.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-18T17:25:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6aac9a04-978d-40fc-b9d1-491419fe4d2c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:36058","PortSpecifier":{"PortValue":36058}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784395534,"nanos":683204835},"http":{"id":"6aac9a04-978d-40fc-b9d1-491419fe4d2c","method":"POST","headers":{":authority":"e2e-shared-a-78538d.apps.895c59d4-5776-4983-8d76-ee2580b4b8e8.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-78538d/rate-test-model-78538d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T17:25:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6aac9a04-978d-40fc-b9d1-491419fe4d2c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-LNQ8eNUSqOrRY3UU_eOAAZ5E6YVMFHa4Svzs6RzOcPombHu2ugDNxvA4w0gW"} {"level":"debug","ts":"2026-07-18T17:25:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6aac9a04-978d-40fc-b9d1-491419fe4d2c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-78538d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-LNQ8eNUSqOrRY3UU_eOAAZ5E6YVMFHa4Svzs6RzOcPombHu2ugDNxvA4w0gW\"}"} {"level":"debug","ts":"2026-07-18T17:25:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6aac9a04-978d-40fc-b9d1-491419fe4d2c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-78538d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"39da57b0-7915-4a35-832f-4a770a3fe9d8","keyName":"e2e-rate-a-992623","subscription":"e2e-rate-iso-a-992623","tenant":"e2e-shared-a-78538d","userId":"39da57b0-7915-4a35-832f-4a770a3fe9d8","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-18T17:25:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6aac9a04-978d-40fc-b9d1-491419fe4d2c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-78538d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-78538d/rate-test-model-78538d\",\"requestedSubscription\":\"e2e-rate-iso-a-992623\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-18T17:25:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6aac9a04-978d-40fc-b9d1-491419fe4d2c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-78538d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-78538d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-992623","namespace":"ai-tenant-e2e-shared-a-78538d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-78538d/rate-test-model-78538d"}} {"level":"debug","ts":"2026-07-18T17:25:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6aac9a04-978d-40fc-b9d1-491419fe4d2c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T17:25:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6aac9a04-978d-40fc-b9d1-491419fe4d2c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T17:25:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6aac9a04-978d-40fc-b9d1-491419fe4d2c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T17:25:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6aac9a04-978d-40fc-b9d1-491419fe4d2c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T17:25:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6aac9a04-978d-40fc-b9d1-491419fe4d2c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-78538d/rate-test-model-78538d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-78538d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T17:25:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6aac9a04-978d-40fc-b9d1-491419fe4d2c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-992623"} {"level":"debug","ts":"2026-07-18T17:25:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6aac9a04-978d-40fc-b9d1-491419fe4d2c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-18T17:25:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6aac9a04-978d-40fc-b9d1-491419fe4d2c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-18T17:25:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6aac9a04-978d-40fc-b9d1-491419fe4d2c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"39da57b0-7915-4a35-832f-4a770a3fe9d8","keyName":"e2e-rate-a-992623","selected_subscription":"e2e-rate-iso-a-992623","selected_subscription_key":"ai-tenant-e2e-shared-a-78538d/e2e-rate-iso-a-992623@ai-tenant-e2e-shared-a-78538d/rate-test-model-78538d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-78538d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-992623","namespace":"ai-tenant-e2e-shared-a-78538d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-78538d/rate-test-model-78538d"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-18T17:25:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6aac9a04-978d-40fc-b9d1-491419fe4d2c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-18T17:25:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6aac9a04-978d-40fc-b9d1-491419fe4d2c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-18T17:25:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d7c3d3f4-9a5f-483d-99ff-70b1075562a8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:59878","PortSpecifier":{"PortValue":59878}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d7c3d3f4-9a5f-483d-99ff-70b1075562a8","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-78538d.apps.895c59d4-5776-4983-8d76-ee2580b4b8e8.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-18T17:25:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d7c3d3f4-9a5f-483d-99ff-70b1075562a8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:59878","PortSpecifier":{"PortValue":59878}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784395547,"nanos":549959376},"http":{"id":"d7c3d3f4-9a5f-483d-99ff-70b1075562a8","method":"POST","headers":{":authority":"e2e-shared-a-78538d.apps.895c59d4-5776-4983-8d76-ee2580b4b8e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T17:25:47Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d7c3d3f4-9a5f-483d-99ff-70b1075562a8","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-18T17:25:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d7c3d3f4-9a5f-483d-99ff-70b1075562a8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f1b895b9-520b-4c73-9653-1fa79c8c3661","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6e438633-d12a-44b1-b014-279cffb6963d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ee2580b4b8e8"]}} {"level":"debug","ts":"2026-07-18T17:25:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d7c3d3f4-9a5f-483d-99ff-70b1075562a8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ee2580b4b8e8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6e438633-d12a-44b1-b014-279cffb6963d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f1b895b9-520b-4c73-9653-1fa79c8c3661","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"175e4cdc26d29960ce6d8bc2fba411fcbffab1591b5450037d0d5fa45b78d0bd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-78538d.apps.895c59d4-5776-4983-8d76-ee2580b4b8e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T17:25:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d7c3d3f4-9a5f-483d-99ff-70b1075562a8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T17:25:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d7c3d3f4-9a5f-483d-99ff-70b1075562a8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T17:25:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d7c3d3f4-9a5f-483d-99ff-70b1075562a8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-78538d/rate-test-model-78538d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-78538d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T17:25:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d7c3d3f4-9a5f-483d-99ff-70b1075562a8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-18T17:25:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d7c3d3f4-9a5f-483d-99ff-70b1075562a8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-18T17:25:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d7c3d3f4-9a5f-483d-99ff-70b1075562a8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-18T17:25:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d7c3d3f4-9a5f-483d-99ff-70b1075562a8","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-18T17:25:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d7c3d3f4-9a5f-483d-99ff-70b1075562a8","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-18T17:25:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cf26d123-7637-495a-94e0-917a3d5235a3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:51590","PortSpecifier":{"PortValue":51590}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cf26d123-7637-495a-94e0-917a3d5235a3","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-497f21.apps.895c59d4-5776-4983-8d76-ee2580b4b8e8.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-18T17:25:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cf26d123-7637-495a-94e0-917a3d5235a3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:51590","PortSpecifier":{"PortValue":51590}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784395547,"nanos":586840710},"http":{"id":"cf26d123-7637-495a-94e0-917a3d5235a3","method":"POST","headers":{":authority":"e2e-shared-b-497f21.apps.895c59d4-5776-4983-8d76-ee2580b4b8e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T17:25:47Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"cf26d123-7637-495a-94e0-917a3d5235a3","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-18T17:25:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cf26d123-7637-495a-94e0-917a3d5235a3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f1b895b9-520b-4c73-9653-1fa79c8c3661","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6e438633-d12a-44b1-b014-279cffb6963d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ee2580b4b8e8"]}} {"level":"debug","ts":"2026-07-18T17:25:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cf26d123-7637-495a-94e0-917a3d5235a3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ee2580b4b8e8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6e438633-d12a-44b1-b014-279cffb6963d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f1b895b9-520b-4c73-9653-1fa79c8c3661","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-497f21.apps.895c59d4-5776-4983-8d76-ee2580b4b8e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T17:25:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cf26d123-7637-495a-94e0-917a3d5235a3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T17:25:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cf26d123-7637-495a-94e0-917a3d5235a3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T17:25:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cf26d123-7637-495a-94e0-917a3d5235a3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-497f21/rate-test-model-497f21\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-497f21/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T17:25:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"cf26d123-7637-495a-94e0-917a3d5235a3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-18T17:25:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cf26d123-7637-495a-94e0-917a3d5235a3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-18T17:25:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cf26d123-7637-495a-94e0-917a3d5235a3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-18T17:25:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cf26d123-7637-495a-94e0-917a3d5235a3","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-18T17:25:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cf26d123-7637-495a-94e0-917a3d5235a3","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-18T17:25:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ed5130a7-a75f-4ec8-972e-e22e1bc0e0f5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:59884","PortSpecifier":{"PortValue":59884}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ed5130a7-a75f-4ec8-972e-e22e1bc0e0f5","method":"POST","path":"/ai-tenant-e2e-shared-a-78538d/rate-test-model-78538d/v1/completions","host":"e2e-shared-a-78538d.apps.895c59d4-5776-4983-8d76-ee2580b4b8e8.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-18T17:25:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ed5130a7-a75f-4ec8-972e-e22e1bc0e0f5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:59884","PortSpecifier":{"PortValue":59884}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784395547,"nanos":622508796},"http":{"id":"ed5130a7-a75f-4ec8-972e-e22e1bc0e0f5","method":"POST","headers":{":authority":"e2e-shared-a-78538d.apps.895c59d4-5776-4983-8d76-ee2580b4b8e8.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-78538d/rate-test-model-78538d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T17:25:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ed5130a7-a75f-4ec8-972e-e22e1bc0e0f5","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-WtRUhF0c21m64aMq_vIUjMo6iVJhAocWkjFQ82J71D53JN79QOEsKooRCrWs"} {"level":"debug","ts":"2026-07-18T17:25:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ed5130a7-a75f-4ec8-972e-e22e1bc0e0f5","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-78538d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-WtRUhF0c21m64aMq_vIUjMo6iVJhAocWkjFQ82J71D53JN79QOEsKooRCrWs\"}"} {"level":"debug","ts":"2026-07-18T17:25:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ed5130a7-a75f-4ec8-972e-e22e1bc0e0f5","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-78538d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"52b7e62d-7d25-4dce-a481-a7905ccd040c","keyName":"e2e-rate-a-c698e2","subscription":"e2e-rate-iso-a-c698e2","tenant":"e2e-shared-a-78538d","userId":"52b7e62d-7d25-4dce-a481-a7905ccd040c","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-18T17:25:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ed5130a7-a75f-4ec8-972e-e22e1bc0e0f5","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-78538d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-78538d/rate-test-model-78538d\",\"requestedSubscription\":\"e2e-rate-iso-a-c698e2\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-18T17:25:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ed5130a7-a75f-4ec8-972e-e22e1bc0e0f5","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-78538d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-78538d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c698e2","namespace":"ai-tenant-e2e-shared-a-78538d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-78538d/rate-test-model-78538d"}} {"level":"debug","ts":"2026-07-18T17:25:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ed5130a7-a75f-4ec8-972e-e22e1bc0e0f5","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T17:25:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ed5130a7-a75f-4ec8-972e-e22e1bc0e0f5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T17:25:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ed5130a7-a75f-4ec8-972e-e22e1bc0e0f5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T17:25:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ed5130a7-a75f-4ec8-972e-e22e1bc0e0f5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-78538d/rate-test-model-78538d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-78538d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T17:25:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ed5130a7-a75f-4ec8-972e-e22e1bc0e0f5","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T17:25:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ed5130a7-a75f-4ec8-972e-e22e1bc0e0f5","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-c698e2"} {"level":"debug","ts":"2026-07-18T17:25:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ed5130a7-a75f-4ec8-972e-e22e1bc0e0f5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-18T17:25:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ed5130a7-a75f-4ec8-972e-e22e1bc0e0f5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-18T17:25:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ed5130a7-a75f-4ec8-972e-e22e1bc0e0f5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"52b7e62d-7d25-4dce-a481-a7905ccd040c","keyName":"e2e-rate-a-c698e2","selected_subscription":"e2e-rate-iso-a-c698e2","selected_subscription_key":"ai-tenant-e2e-shared-a-78538d/e2e-rate-iso-a-c698e2@ai-tenant-e2e-shared-a-78538d/rate-test-model-78538d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-78538d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c698e2","namespace":"ai-tenant-e2e-shared-a-78538d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-78538d/rate-test-model-78538d"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-18T17:25:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ed5130a7-a75f-4ec8-972e-e22e1bc0e0f5","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-18T17:25:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ed5130a7-a75f-4ec8-972e-e22e1bc0e0f5","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-18T17:25:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0df16df8-2b0f-48ce-b9e4-64a0b9777142","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:59888","PortSpecifier":{"PortValue":59888}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0df16df8-2b0f-48ce-b9e4-64a0b9777142","method":"POST","path":"/ai-tenant-e2e-shared-a-78538d/rate-test-model-78538d/v1/completions","host":"e2e-shared-a-78538d.apps.895c59d4-5776-4983-8d76-ee2580b4b8e8.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-18T17:25:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0df16df8-2b0f-48ce-b9e4-64a0b9777142","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:59888","PortSpecifier":{"PortValue":59888}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784395548,"nanos":661692871},"http":{"id":"0df16df8-2b0f-48ce-b9e4-64a0b9777142","method":"POST","headers":{":authority":"e2e-shared-a-78538d.apps.895c59d4-5776-4983-8d76-ee2580b4b8e8.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-78538d/rate-test-model-78538d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T17:25:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0df16df8-2b0f-48ce-b9e4-64a0b9777142","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-WtRUhF0c21m64aMq_vIUjMo6iVJhAocWkjFQ82J71D53JN79QOEsKooRCrWs"} {"level":"debug","ts":"2026-07-18T17:25:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0df16df8-2b0f-48ce-b9e4-64a0b9777142","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-78538d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-WtRUhF0c21m64aMq_vIUjMo6iVJhAocWkjFQ82J71D53JN79QOEsKooRCrWs\"}"} {"level":"debug","ts":"2026-07-18T17:25:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0df16df8-2b0f-48ce-b9e4-64a0b9777142","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-78538d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"52b7e62d-7d25-4dce-a481-a7905ccd040c","keyName":"e2e-rate-a-c698e2","subscription":"e2e-rate-iso-a-c698e2","tenant":"e2e-shared-a-78538d","userId":"52b7e62d-7d25-4dce-a481-a7905ccd040c","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-18T17:25:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0df16df8-2b0f-48ce-b9e4-64a0b9777142","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-78538d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-78538d/rate-test-model-78538d\",\"requestedSubscription\":\"e2e-rate-iso-a-c698e2\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-18T17:25:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0df16df8-2b0f-48ce-b9e4-64a0b9777142","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-78538d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-78538d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c698e2","namespace":"ai-tenant-e2e-shared-a-78538d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-78538d/rate-test-model-78538d"}} {"level":"debug","ts":"2026-07-18T17:25:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0df16df8-2b0f-48ce-b9e4-64a0b9777142","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T17:25:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0df16df8-2b0f-48ce-b9e4-64a0b9777142","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T17:25:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0df16df8-2b0f-48ce-b9e4-64a0b9777142","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T17:25:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0df16df8-2b0f-48ce-b9e4-64a0b9777142","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T17:25:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0df16df8-2b0f-48ce-b9e4-64a0b9777142","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-78538d/rate-test-model-78538d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-78538d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T17:25:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0df16df8-2b0f-48ce-b9e4-64a0b9777142","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-18T17:25:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0df16df8-2b0f-48ce-b9e4-64a0b9777142","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-18T17:25:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0df16df8-2b0f-48ce-b9e4-64a0b9777142","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-c698e2"} {"level":"debug","ts":"2026-07-18T17:25:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0df16df8-2b0f-48ce-b9e4-64a0b9777142","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"52b7e62d-7d25-4dce-a481-a7905ccd040c","keyName":"e2e-rate-a-c698e2","selected_subscription":"e2e-rate-iso-a-c698e2","selected_subscription_key":"ai-tenant-e2e-shared-a-78538d/e2e-rate-iso-a-c698e2@ai-tenant-e2e-shared-a-78538d/rate-test-model-78538d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-78538d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c698e2","namespace":"ai-tenant-e2e-shared-a-78538d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-78538d/rate-test-model-78538d"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-18T17:25:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0df16df8-2b0f-48ce-b9e4-64a0b9777142","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-18T17:25:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0df16df8-2b0f-48ce-b9e4-64a0b9777142","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-18T17:25:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c644f0e2-301a-47f9-ae72-4433d1a6f4d0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:59894","PortSpecifier":{"PortValue":59894}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c644f0e2-301a-47f9-ae72-4433d1a6f4d0","method":"POST","path":"/ai-tenant-e2e-shared-a-78538d/rate-test-model-78538d/v1/completions","host":"e2e-shared-a-78538d.apps.895c59d4-5776-4983-8d76-ee2580b4b8e8.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-18T17:25:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c644f0e2-301a-47f9-ae72-4433d1a6f4d0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:59894","PortSpecifier":{"PortValue":59894}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784395549,"nanos":698539759},"http":{"id":"c644f0e2-301a-47f9-ae72-4433d1a6f4d0","method":"POST","headers":{":authority":"e2e-shared-a-78538d.apps.895c59d4-5776-4983-8d76-ee2580b4b8e8.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-78538d/rate-test-model-78538d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T17:25:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c644f0e2-301a-47f9-ae72-4433d1a6f4d0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-WtRUhF0c21m64aMq_vIUjMo6iVJhAocWkjFQ82J71D53JN79QOEsKooRCrWs"} {"level":"debug","ts":"2026-07-18T17:25:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c644f0e2-301a-47f9-ae72-4433d1a6f4d0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-78538d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-WtRUhF0c21m64aMq_vIUjMo6iVJhAocWkjFQ82J71D53JN79QOEsKooRCrWs\"}"} {"level":"debug","ts":"2026-07-18T17:25:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c644f0e2-301a-47f9-ae72-4433d1a6f4d0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-78538d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"52b7e62d-7d25-4dce-a481-a7905ccd040c","keyName":"e2e-rate-a-c698e2","subscription":"e2e-rate-iso-a-c698e2","tenant":"e2e-shared-a-78538d","userId":"52b7e62d-7d25-4dce-a481-a7905ccd040c","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-18T17:25:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c644f0e2-301a-47f9-ae72-4433d1a6f4d0","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-78538d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-78538d/rate-test-model-78538d\",\"requestedSubscription\":\"e2e-rate-iso-a-c698e2\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-18T17:25:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c644f0e2-301a-47f9-ae72-4433d1a6f4d0","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-78538d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-78538d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c698e2","namespace":"ai-tenant-e2e-shared-a-78538d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-78538d/rate-test-model-78538d"}} {"level":"debug","ts":"2026-07-18T17:25:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c644f0e2-301a-47f9-ae72-4433d1a6f4d0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T17:25:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c644f0e2-301a-47f9-ae72-4433d1a6f4d0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T17:25:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c644f0e2-301a-47f9-ae72-4433d1a6f4d0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T17:25:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c644f0e2-301a-47f9-ae72-4433d1a6f4d0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-78538d/rate-test-model-78538d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-78538d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T17:25:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c644f0e2-301a-47f9-ae72-4433d1a6f4d0","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T17:25:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c644f0e2-301a-47f9-ae72-4433d1a6f4d0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-18T17:25:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c644f0e2-301a-47f9-ae72-4433d1a6f4d0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-c698e2"} {"level":"debug","ts":"2026-07-18T17:25:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c644f0e2-301a-47f9-ae72-4433d1a6f4d0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-18T17:25:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c644f0e2-301a-47f9-ae72-4433d1a6f4d0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"52b7e62d-7d25-4dce-a481-a7905ccd040c","keyName":"e2e-rate-a-c698e2","selected_subscription":"e2e-rate-iso-a-c698e2","selected_subscription_key":"ai-tenant-e2e-shared-a-78538d/e2e-rate-iso-a-c698e2@ai-tenant-e2e-shared-a-78538d/rate-test-model-78538d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-78538d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c698e2","namespace":"ai-tenant-e2e-shared-a-78538d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-78538d/rate-test-model-78538d"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-18T17:25:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c644f0e2-301a-47f9-ae72-4433d1a6f4d0","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-18T17:25:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c644f0e2-301a-47f9-ae72-4433d1a6f4d0","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-18T17:25:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a865cf3b-7f13-4536-8161-b58bb1191964","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:51606","PortSpecifier":{"PortValue":51606}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a865cf3b-7f13-4536-8161-b58bb1191964","method":"POST","path":"/ai-tenant-e2e-shared-b-497f21/rate-test-model-497f21/v1/completions","host":"e2e-shared-b-497f21.apps.895c59d4-5776-4983-8d76-ee2580b4b8e8.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-18T17:25:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a865cf3b-7f13-4536-8161-b58bb1191964","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:51606","PortSpecifier":{"PortValue":51606}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784395549,"nanos":732681524},"http":{"id":"a865cf3b-7f13-4536-8161-b58bb1191964","method":"POST","headers":{":authority":"e2e-shared-b-497f21.apps.895c59d4-5776-4983-8d76-ee2580b4b8e8.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-497f21/rate-test-model-497f21/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T17:25:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a865cf3b-7f13-4536-8161-b58bb1191964","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-13xGAdkP4llIh9V6p_6GU6tqSl8bGzRubyFJ8FhDATq26qXFzU5JM17Aesv6J"} {"level":"debug","ts":"2026-07-18T17:25:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a865cf3b-7f13-4536-8161-b58bb1191964","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-497f21.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-13xGAdkP4llIh9V6p_6GU6tqSl8bGzRubyFJ8FhDATq26qXFzU5JM17Aesv6J\"}"} {"level":"debug","ts":"2026-07-18T17:25:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a865cf3b-7f13-4536-8161-b58bb1191964","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-497f21.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e5f15615-8d9a-4726-aa28-bd86d0dc189f","keyName":"e2e-rate-b-c698e2","subscription":"e2e-rate-iso-b-c698e2","tenant":"e2e-shared-b-497f21","userId":"e5f15615-8d9a-4726-aa28-bd86d0dc189f","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-18T17:25:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a865cf3b-7f13-4536-8161-b58bb1191964","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-497f21.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-497f21/rate-test-model-497f21\",\"requestedSubscription\":\"e2e-rate-iso-b-c698e2\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-18T17:25:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a865cf3b-7f13-4536-8161-b58bb1191964","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-497f21.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-497f21","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-c698e2","namespace":"ai-tenant-e2e-shared-b-497f21","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-497f21/rate-test-model-497f21"}} {"level":"debug","ts":"2026-07-18T17:25:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a865cf3b-7f13-4536-8161-b58bb1191964","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T17:25:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a865cf3b-7f13-4536-8161-b58bb1191964","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T17:25:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a865cf3b-7f13-4536-8161-b58bb1191964","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T17:25:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a865cf3b-7f13-4536-8161-b58bb1191964","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T17:25:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a865cf3b-7f13-4536-8161-b58bb1191964","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-497f21/rate-test-model-497f21\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-497f21/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T17:25:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a865cf3b-7f13-4536-8161-b58bb1191964","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-18T17:25:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a865cf3b-7f13-4536-8161-b58bb1191964","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-c698e2"} {"level":"debug","ts":"2026-07-18T17:25:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a865cf3b-7f13-4536-8161-b58bb1191964","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-18T17:25:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a865cf3b-7f13-4536-8161-b58bb1191964","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"e5f15615-8d9a-4726-aa28-bd86d0dc189f","keyName":"e2e-rate-b-c698e2","selected_subscription":"e2e-rate-iso-b-c698e2","selected_subscription_key":"ai-tenant-e2e-shared-b-497f21/e2e-rate-iso-b-c698e2@ai-tenant-e2e-shared-b-497f21/rate-test-model-497f21","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-497f21","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-c698e2","namespace":"ai-tenant-e2e-shared-b-497f21","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-497f21/rate-test-model-497f21"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-18T17:25:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a865cf3b-7f13-4536-8161-b58bb1191964","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-18T17:25:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a865cf3b-7f13-4536-8161-b58bb1191964","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-18T17:25:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/00da27777581d4c8435848043bc93d90a9fc2159cae93fd3893ddfcac5211202"} {"level":"info","ts":"2026-07-18T17:25:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/258603dc92ec5bf95a356bb8bc84fda1969d1e56273b46ff66d51020ec4d5fb3"} {"level":"info","ts":"2026-07-18T17:25:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4"} {"level":"info","ts":"2026-07-18T17:25:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/99ffcb5d12592d01495504ba76e208b1ef8c9acbb38a0f84473b0a36cccb4827"} {"level":"info","ts":"2026-07-18T17:25:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/970d0bf55ef1001616bca803cad8a27b1d07c2f5842ecf0d6c58cc34cf2e48a4"} {"level":"info","ts":"2026-07-18T17:25:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/455374c27d9f1fcaf34c0dba17245c7e0a1c4ac81254cef154bee3a2c2e086ef"} {"level":"info","ts":"2026-07-18T17:25:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/08e466dca46125e5191076d01e332c228b75ff374520dcc9456bf770e9e550c0"} {"level":"info","ts":"2026-07-18T17:25:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/06b53039ab0ca0c20f0b6df937434eb6528cfe7172679e2ef7b973025182c5c5"} {"level":"info","ts":"2026-07-18T17:25:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9d32968ea6736064f54bdce5e6a5717ab2487de54745c9083ab155b897a88884"} {"level":"info","ts":"2026-07-18T17:25:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/67ca6ea61fb2fa5c186063adf891df2f98bcf97bcd3e30cb990527787db2a218"} {"level":"info","ts":"2026-07-18T17:25:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a24738226eaaa8affe2828d75b719849d4e90faca7793443ec3ee72361e0a0f8"} {"level":"info","ts":"2026-07-18T17:25:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/175e4cdc26d29960ce6d8bc2fba411fcbffab1591b5450037d0d5fa45b78d0bd"} {"level":"info","ts":"2026-07-18T17:25:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a70d9f48c87ea8b30ba1bffa31e30cfe89cdb23282fa47a30b38b5257e030173"} {"level":"info","ts":"2026-07-18T17:25:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eeec35435dae4d11ef4448e7497f2507b94c577c6d026a60914fe8dd7dfc631a"} {"level":"info","ts":"2026-07-18T17:25:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5bdde9dbbe634215d8040405a0c1403dbd270010373b9158acd5c3fed658afe2"} {"level":"info","ts":"2026-07-18T17:25:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/773c816ec8afc043553846f347cb0a50dd079d4b8ef6feec5399412f57cb8557"} {"level":"info","ts":"2026-07-18T17:25:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7302e627c677cf40b2435ef7e7edb86c522f082bc7d6066de4328a5b923fcf5c"} {"level":"info","ts":"2026-07-18T17:25:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f750141328196ac788f42b6513d38861fec75aecfd4e8f883b5a6cc1e38c4d0b"} {"level":"info","ts":"2026-07-18T17:25:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/18136a7ea3224fd4fe8d635f843eeb7edcb7aef1c349914ac7d6844a9ff43eff"} {"level":"info","ts":"2026-07-18T17:25:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a86fa054434b3912857b415491467c796a24b2ea33671ec3f61208a063bb3fbf"} {"level":"info","ts":"2026-07-18T17:25:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0"} {"level":"info","ts":"2026-07-18T17:25:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/319f7a57db3730e6ce65097705196fc174d7885777ceb595a5b12681fd290412"} {"level":"info","ts":"2026-07-18T17:25:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/015c9cc290ecdf7de3c9b108b2aaa2d0b8827bc03e39b8977906d9b41479d386"} {"level":"info","ts":"2026-07-18T17:25:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ab43823010c10cebabc0c4e4dcc942ff542d4524afa0ea0323a7c515a8329a3b"}