--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) --- {"level":"info","ts":"2026-07-14T20:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cbfa9dd5bf131c862db8cc4af053a3ae56f7ae1be83edce9e8cdede1ab5526f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6d548aada78dd9325ffc4c525afcf8b888503c0a79685aa5977231b2cde5431","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:22:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:22:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a6d548aada78dd9325ffc4c525afcf8b888503c0a79685aa5977231b2cde5431"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eddcddd0ed2677defcb1757e2fb3c9b14a91dd5ac432d54eb12b7305f7350477"} {"level":"info","ts":"2026-07-14T20:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6d548aada78dd9325ffc4c525afcf8b888503c0a79685aa5977231b2cde5431","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"430ebfe5fa1c1a855c5eea152a07f54adc6cbdd0dd541a388c2917ce904d1cc0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:22:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:22:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"430ebfe5fa1c1a855c5eea152a07f54adc6cbdd0dd541a388c2917ce904d1cc0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cbfa9dd5bf131c862db8cc4af053a3ae56f7ae1be83edce9e8cdede1ab5526f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:22:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:22:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cbfa9dd5bf131c862db8cc4af053a3ae56f7ae1be83edce9e8cdede1ab5526f0"} {"level":"info","ts":"2026-07-14T20:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cbfa9dd5bf131c862db8cc4af053a3ae56f7ae1be83edce9e8cdede1ab5526f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6d548aada78dd9325ffc4c525afcf8b888503c0a79685aa5977231b2cde5431","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:22:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:22:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6d548aada78dd9325ffc4c525afcf8b888503c0a79685aa5977231b2cde5431"} {"level":"info","ts":"2026-07-14T20:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6d548aada78dd9325ffc4c525afcf8b888503c0a79685aa5977231b2cde5431","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"430ebfe5fa1c1a855c5eea152a07f54adc6cbdd0dd541a388c2917ce904d1cc0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:22:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:22:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/430ebfe5fa1c1a855c5eea152a07f54adc6cbdd0dd541a388c2917ce904d1cc0"} {"level":"info","ts":"2026-07-14T20:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"430ebfe5fa1c1a855c5eea152a07f54adc6cbdd0dd541a388c2917ce904d1cc0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cbfa9dd5bf131c862db8cc4af053a3ae56f7ae1be83edce9e8cdede1ab5526f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6d548aada78dd9325ffc4c525afcf8b888503c0a79685aa5977231b2cde5431","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:22:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:22:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a6d548aada78dd9325ffc4c525afcf8b888503c0a79685aa5977231b2cde5431"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cbfa9dd5bf131c862db8cc4af053a3ae56f7ae1be83edce9e8cdede1ab5526f0"} {"level":"info","ts":"2026-07-14T20:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6d548aada78dd9325ffc4c525afcf8b888503c0a79685aa5977231b2cde5431","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"430ebfe5fa1c1a855c5eea152a07f54adc6cbdd0dd541a388c2917ce904d1cc0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:22:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:22:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["430ebfe5fa1c1a855c5eea152a07f54adc6cbdd0dd541a388c2917ce904d1cc0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"430ebfe5fa1c1a855c5eea152a07f54adc6cbdd0dd541a388c2917ce904d1cc0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cbfa9dd5bf131c862db8cc4af053a3ae56f7ae1be83edce9e8cdede1ab5526f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:22:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:22:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cbfa9dd5bf131c862db8cc4af053a3ae56f7ae1be83edce9e8cdede1ab5526f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6d548aada78dd9325ffc4c525afcf8b888503c0a79685aa5977231b2cde5431"} {"level":"info","ts":"2026-07-14T20:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cbfa9dd5bf131c862db8cc4af053a3ae56f7ae1be83edce9e8cdede1ab5526f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:22:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:22:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/430ebfe5fa1c1a855c5eea152a07f54adc6cbdd0dd541a388c2917ce904d1cc0"} {"level":"info","ts":"2026-07-14T20:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6d548aada78dd9325ffc4c525afcf8b888503c0a79685aa5977231b2cde5431","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9920b494fe619816fb098d84ce195da411262605da637629e4646a8c050d2ce7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:22:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:22:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd"} {"level":"info","ts":"2026-07-14T20:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9920b494fe619816fb098d84ce195da411262605da637629e4646a8c050d2ce7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"430ebfe5fa1c1a855c5eea152a07f54adc6cbdd0dd541a388c2917ce904d1cc0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cbfa9dd5bf131c862db8cc4af053a3ae56f7ae1be83edce9e8cdede1ab5526f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:22:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:22:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9920b494fe619816fb098d84ce195da411262605da637629e4646a8c050d2ce7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:22:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:22:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9920b494fe619816fb098d84ce195da411262605da637629e4646a8c050d2ce7"} {"level":"info","ts":"2026-07-14T20:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9920b494fe619816fb098d84ce195da411262605da637629e4646a8c050d2ce7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"244ef314265de4b56be058464ab2e474e5a94e68d0cff08812b45ff543831af8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:22:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:22:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6d548aada78dd9325ffc4c525afcf8b888503c0a79685aa5977231b2cde5431"} {"level":"info","ts":"2026-07-14T20:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"244ef314265de4b56be058464ab2e474e5a94e68d0cff08812b45ff543831af8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9920b494fe619816fb098d84ce195da411262605da637629e4646a8c050d2ce7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:22:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:22:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9920b494fe619816fb098d84ce195da411262605da637629e4646a8c050d2ce7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cbfa9dd5bf131c862db8cc4af053a3ae56f7ae1be83edce9e8cdede1ab5526f0"} {"level":"info","ts":"2026-07-14T20:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9920b494fe619816fb098d84ce195da411262605da637629e4646a8c050d2ce7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6218b2f7be103e6c0e316cefb9d97942a57e2625847f343c7132adb85b60fe86","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:22:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:22:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/430ebfe5fa1c1a855c5eea152a07f54adc6cbdd0dd541a388c2917ce904d1cc0"} {"level":"info","ts":"2026-07-14T20:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6218b2f7be103e6c0e316cefb9d97942a57e2625847f343c7132adb85b60fe86","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"244ef314265de4b56be058464ab2e474e5a94e68d0cff08812b45ff543831af8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9920b494fe619816fb098d84ce195da411262605da637629e4646a8c050d2ce7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6218b2f7be103e6c0e316cefb9d97942a57e2625847f343c7132adb85b60fe86","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6218b2f7be103e6c0e316cefb9d97942a57e2625847f343c7132adb85b60fe86","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"244ef314265de4b56be058464ab2e474e5a94e68d0cff08812b45ff543831af8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd"} {"level":"debug","ts":"2026-07-14T20:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6218b2f7be103e6c0e316cefb9d97942a57e2625847f343c7132adb85b60fe86","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"244ef314265de4b56be058464ab2e474e5a94e68d0cff08812b45ff543831af8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9920b494fe619816fb098d84ce195da411262605da637629e4646a8c050d2ce7"} {"level":"info","ts":"2026-07-14T20:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/244ef314265de4b56be058464ab2e474e5a94e68d0cff08812b45ff543831af8"} {"level":"debug","ts":"2026-07-14T20:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6218b2f7be103e6c0e316cefb9d97942a57e2625847f343c7132adb85b60fe86","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:22:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:22:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6218b2f7be103e6c0e316cefb9d97942a57e2625847f343c7132adb85b60fe86"} {"level":"info","ts":"2026-07-14T20:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6218b2f7be103e6c0e316cefb9d97942a57e2625847f343c7132adb85b60fe86","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"244ef314265de4b56be058464ab2e474e5a94e68d0cff08812b45ff543831af8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:22:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:22:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["244ef314265de4b56be058464ab2e474e5a94e68d0cff08812b45ff543831af8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"244ef314265de4b56be058464ab2e474e5a94e68d0cff08812b45ff543831af8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6218b2f7be103e6c0e316cefb9d97942a57e2625847f343c7132adb85b60fe86","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"244ef314265de4b56be058464ab2e474e5a94e68d0cff08812b45ff543831af8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6218b2f7be103e6c0e316cefb9d97942a57e2625847f343c7132adb85b60fe86"} {"level":"info","ts":"2026-07-14T20:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/244ef314265de4b56be058464ab2e474e5a94e68d0cff08812b45ff543831af8"} {"level":"debug","ts":"2026-07-14T20:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6218b2f7be103e6c0e316cefb9d97942a57e2625847f343c7132adb85b60fe86","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:22:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:22:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6218b2f7be103e6c0e316cefb9d97942a57e2625847f343c7132adb85b60fe86"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6218b2f7be103e6c0e316cefb9d97942a57e2625847f343c7132adb85b60fe86","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6218b2f7be103e6c0e316cefb9d97942a57e2625847f343c7132adb85b60fe86","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:22:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:22:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6218b2f7be103e6c0e316cefb9d97942a57e2625847f343c7132adb85b60fe86","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6218b2f7be103e6c0e316cefb9d97942a57e2625847f343c7132adb85b60fe86","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6218b2f7be103e6c0e316cefb9d97942a57e2625847f343c7132adb85b60fe86"} {"level":"debug","ts":"2026-07-14T20:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6218b2f7be103e6c0e316cefb9d97942a57e2625847f343c7132adb85b60fe86","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6218b2f7be103e6c0e316cefb9d97942a57e2625847f343c7132adb85b60fe86","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6218b2f7be103e6c0e316cefb9d97942a57e2625847f343c7132adb85b60fe86"} {"level":"debug","ts":"2026-07-14T20:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6218b2f7be103e6c0e316cefb9d97942a57e2625847f343c7132adb85b60fe86","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:22:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:22:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6218b2f7be103e6c0e316cefb9d97942a57e2625847f343c7132adb85b60fe86"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6218b2f7be103e6c0e316cefb9d97942a57e2625847f343c7132adb85b60fe86","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6218b2f7be103e6c0e316cefb9d97942a57e2625847f343c7132adb85b60fe86","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:22:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:22:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6218b2f7be103e6c0e316cefb9d97942a57e2625847f343c7132adb85b60fe86","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6218b2f7be103e6c0e316cefb9d97942a57e2625847f343c7132adb85b60fe86","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6218b2f7be103e6c0e316cefb9d97942a57e2625847f343c7132adb85b60fe86"} {"level":"debug","ts":"2026-07-14T20:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6218b2f7be103e6c0e316cefb9d97942a57e2625847f343c7132adb85b60fe86","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6218b2f7be103e6c0e316cefb9d97942a57e2625847f343c7132adb85b60fe86"} {"level":"debug","ts":"2026-07-14T20:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6218b2f7be103e6c0e316cefb9d97942a57e2625847f343c7132adb85b60fe86","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:22:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:22:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6218b2f7be103e6c0e316cefb9d97942a57e2625847f343c7132adb85b60fe86"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6218b2f7be103e6c0e316cefb9d97942a57e2625847f343c7132adb85b60fe86","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6218b2f7be103e6c0e316cefb9d97942a57e2625847f343c7132adb85b60fe86","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:22:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:22:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6218b2f7be103e6c0e316cefb9d97942a57e2625847f343c7132adb85b60fe86","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:22:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6218b2f7be103e6c0e316cefb9d97942a57e2625847f343c7132adb85b60fe86","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:22:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6218b2f7be103e6c0e316cefb9d97942a57e2625847f343c7132adb85b60fe86"} {"level":"debug","ts":"2026-07-14T20:22:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6218b2f7be103e6c0e316cefb9d97942a57e2625847f343c7132adb85b60fe86","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:22:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6218b2f7be103e6c0e316cefb9d97942a57e2625847f343c7132adb85b60fe86","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:22:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6218b2f7be103e6c0e316cefb9d97942a57e2625847f343c7132adb85b60fe86"} {"level":"debug","ts":"2026-07-14T20:22:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6218b2f7be103e6c0e316cefb9d97942a57e2625847f343c7132adb85b60fe86","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:22:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:22:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6218b2f7be103e6c0e316cefb9d97942a57e2625847f343c7132adb85b60fe86"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:22:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6218b2f7be103e6c0e316cefb9d97942a57e2625847f343c7132adb85b60fe86","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:22:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6218b2f7be103e6c0e316cefb9d97942a57e2625847f343c7132adb85b60fe86","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:22:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:22:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:22:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6218b2f7be103e6c0e316cefb9d97942a57e2625847f343c7132adb85b60fe86","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:22:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6218b2f7be103e6c0e316cefb9d97942a57e2625847f343c7132adb85b60fe86","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:22:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6218b2f7be103e6c0e316cefb9d97942a57e2625847f343c7132adb85b60fe86","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:22:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6218b2f7be103e6c0e316cefb9d97942a57e2625847f343c7132adb85b60fe86"} {"level":"debug","ts":"2026-07-14T20:22:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6218b2f7be103e6c0e316cefb9d97942a57e2625847f343c7132adb85b60fe86","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:22:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6218b2f7be103e6c0e316cefb9d97942a57e2625847f343c7132adb85b60fe86"} {"level":"debug","ts":"2026-07-14T20:22:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6218b2f7be103e6c0e316cefb9d97942a57e2625847f343c7132adb85b60fe86","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:22:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:22:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6218b2f7be103e6c0e316cefb9d97942a57e2625847f343c7132adb85b60fe86"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:22:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6218b2f7be103e6c0e316cefb9d97942a57e2625847f343c7132adb85b60fe86","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:22:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6218b2f7be103e6c0e316cefb9d97942a57e2625847f343c7132adb85b60fe86","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:22:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:22:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:22:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6218b2f7be103e6c0e316cefb9d97942a57e2625847f343c7132adb85b60fe86"} {"level":"info","ts":"2026-07-14T20:22:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6218b2f7be103e6c0e316cefb9d97942a57e2625847f343c7132adb85b60fe86","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:22:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6218b2f7be103e6c0e316cefb9d97942a57e2625847f343c7132adb85b60fe86","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:22:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6218b2f7be103e6c0e316cefb9d97942a57e2625847f343c7132adb85b60fe86","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:22:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6218b2f7be103e6c0e316cefb9d97942a57e2625847f343c7132adb85b60fe86","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:22:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6218b2f7be103e6c0e316cefb9d97942a57e2625847f343c7132adb85b60fe86"} {"level":"debug","ts":"2026-07-14T20:22:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6218b2f7be103e6c0e316cefb9d97942a57e2625847f343c7132adb85b60fe86","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:22:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:22:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6218b2f7be103e6c0e316cefb9d97942a57e2625847f343c7132adb85b60fe86"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:22:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6218b2f7be103e6c0e316cefb9d97942a57e2625847f343c7132adb85b60fe86","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:22:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6218b2f7be103e6c0e316cefb9d97942a57e2625847f343c7132adb85b60fe86","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:22:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:22:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:22:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6218b2f7be103e6c0e316cefb9d97942a57e2625847f343c7132adb85b60fe86","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:22:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6218b2f7be103e6c0e316cefb9d97942a57e2625847f343c7132adb85b60fe86","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:22:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6218b2f7be103e6c0e316cefb9d97942a57e2625847f343c7132adb85b60fe86","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:22:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6218b2f7be103e6c0e316cefb9d97942a57e2625847f343c7132adb85b60fe86"} {"level":"debug","ts":"2026-07-14T20:22:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6218b2f7be103e6c0e316cefb9d97942a57e2625847f343c7132adb85b60fe86","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:22:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6218b2f7be103e6c0e316cefb9d97942a57e2625847f343c7132adb85b60fe86"} {"level":"debug","ts":"2026-07-14T20:22:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6218b2f7be103e6c0e316cefb9d97942a57e2625847f343c7132adb85b60fe86","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:22:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:22:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6218b2f7be103e6c0e316cefb9d97942a57e2625847f343c7132adb85b60fe86"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:22:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6218b2f7be103e6c0e316cefb9d97942a57e2625847f343c7132adb85b60fe86","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:22:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6218b2f7be103e6c0e316cefb9d97942a57e2625847f343c7132adb85b60fe86","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:22:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:22:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:22:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6218b2f7be103e6c0e316cefb9d97942a57e2625847f343c7132adb85b60fe86","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:22:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6218b2f7be103e6c0e316cefb9d97942a57e2625847f343c7132adb85b60fe86","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:22:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6218b2f7be103e6c0e316cefb9d97942a57e2625847f343c7132adb85b60fe86","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:22:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6218b2f7be103e6c0e316cefb9d97942a57e2625847f343c7132adb85b60fe86"} {"level":"debug","ts":"2026-07-14T20:22:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6218b2f7be103e6c0e316cefb9d97942a57e2625847f343c7132adb85b60fe86","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:22:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6218b2f7be103e6c0e316cefb9d97942a57e2625847f343c7132adb85b60fe86"} {"level":"debug","ts":"2026-07-14T20:22:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6218b2f7be103e6c0e316cefb9d97942a57e2625847f343c7132adb85b60fe86","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:22:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:22:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6218b2f7be103e6c0e316cefb9d97942a57e2625847f343c7132adb85b60fe86"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:22:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6218b2f7be103e6c0e316cefb9d97942a57e2625847f343c7132adb85b60fe86","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:22:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6218b2f7be103e6c0e316cefb9d97942a57e2625847f343c7132adb85b60fe86","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:22:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:22:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:22:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6218b2f7be103e6c0e316cefb9d97942a57e2625847f343c7132adb85b60fe86","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:22:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6218b2f7be103e6c0e316cefb9d97942a57e2625847f343c7132adb85b60fe86","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:22:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6218b2f7be103e6c0e316cefb9d97942a57e2625847f343c7132adb85b60fe86","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:22:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6218b2f7be103e6c0e316cefb9d97942a57e2625847f343c7132adb85b60fe86"} {"level":"debug","ts":"2026-07-14T20:22:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6218b2f7be103e6c0e316cefb9d97942a57e2625847f343c7132adb85b60fe86","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:22:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6218b2f7be103e6c0e316cefb9d97942a57e2625847f343c7132adb85b60fe86"} {"level":"debug","ts":"2026-07-14T20:22:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6218b2f7be103e6c0e316cefb9d97942a57e2625847f343c7132adb85b60fe86","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:22:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:22:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6218b2f7be103e6c0e316cefb9d97942a57e2625847f343c7132adb85b60fe86"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:22:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6218b2f7be103e6c0e316cefb9d97942a57e2625847f343c7132adb85b60fe86","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:22:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6218b2f7be103e6c0e316cefb9d97942a57e2625847f343c7132adb85b60fe86","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:22:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:22:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:22:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6218b2f7be103e6c0e316cefb9d97942a57e2625847f343c7132adb85b60fe86","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:22:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6218b2f7be103e6c0e316cefb9d97942a57e2625847f343c7132adb85b60fe86","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:22:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6218b2f7be103e6c0e316cefb9d97942a57e2625847f343c7132adb85b60fe86","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:22:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6218b2f7be103e6c0e316cefb9d97942a57e2625847f343c7132adb85b60fe86"} {"level":"debug","ts":"2026-07-14T20:22:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6218b2f7be103e6c0e316cefb9d97942a57e2625847f343c7132adb85b60fe86","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:22:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6218b2f7be103e6c0e316cefb9d97942a57e2625847f343c7132adb85b60fe86"} {"level":"debug","ts":"2026-07-14T20:22:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6218b2f7be103e6c0e316cefb9d97942a57e2625847f343c7132adb85b60fe86","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:22:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:22:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6218b2f7be103e6c0e316cefb9d97942a57e2625847f343c7132adb85b60fe86"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:22:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6218b2f7be103e6c0e316cefb9d97942a57e2625847f343c7132adb85b60fe86","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:22:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6218b2f7be103e6c0e316cefb9d97942a57e2625847f343c7132adb85b60fe86","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:22:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:22:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:22:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6218b2f7be103e6c0e316cefb9d97942a57e2625847f343c7132adb85b60fe86","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:22:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6218b2f7be103e6c0e316cefb9d97942a57e2625847f343c7132adb85b60fe86","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:22:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6218b2f7be103e6c0e316cefb9d97942a57e2625847f343c7132adb85b60fe86"} {"level":"debug","ts":"2026-07-14T20:22:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6218b2f7be103e6c0e316cefb9d97942a57e2625847f343c7132adb85b60fe86","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:22:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6218b2f7be103e6c0e316cefb9d97942a57e2625847f343c7132adb85b60fe86"} {"level":"debug","ts":"2026-07-14T20:22:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6218b2f7be103e6c0e316cefb9d97942a57e2625847f343c7132adb85b60fe86","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:22:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:22:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6218b2f7be103e6c0e316cefb9d97942a57e2625847f343c7132adb85b60fe86"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:22:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6218b2f7be103e6c0e316cefb9d97942a57e2625847f343c7132adb85b60fe86","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:22:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6218b2f7be103e6c0e316cefb9d97942a57e2625847f343c7132adb85b60fe86","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:22:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:22:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:22:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6218b2f7be103e6c0e316cefb9d97942a57e2625847f343c7132adb85b60fe86","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:22:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6218b2f7be103e6c0e316cefb9d97942a57e2625847f343c7132adb85b60fe86","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:22:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6218b2f7be103e6c0e316cefb9d97942a57e2625847f343c7132adb85b60fe86"} {"level":"debug","ts":"2026-07-14T20:22:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6218b2f7be103e6c0e316cefb9d97942a57e2625847f343c7132adb85b60fe86","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:22:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6218b2f7be103e6c0e316cefb9d97942a57e2625847f343c7132adb85b60fe86"} {"level":"debug","ts":"2026-07-14T20:22:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6218b2f7be103e6c0e316cefb9d97942a57e2625847f343c7132adb85b60fe86","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:22:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:22:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6218b2f7be103e6c0e316cefb9d97942a57e2625847f343c7132adb85b60fe86"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:22:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6218b2f7be103e6c0e316cefb9d97942a57e2625847f343c7132adb85b60fe86","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:22:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6218b2f7be103e6c0e316cefb9d97942a57e2625847f343c7132adb85b60fe86","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:22:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6218b2f7be103e6c0e316cefb9d97942a57e2625847f343c7132adb85b60fe86"} {"level":"debug","ts":"2026-07-14T20:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b639661db139c3abba4602bea92220639e0cef0234f235789e383c1a7cd6cb3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:22:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:22:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b639661db139c3abba4602bea92220639e0cef0234f235789e383c1a7cd6cb3c"} {"level":"info","ts":"2026-07-14T20:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b639661db139c3abba4602bea92220639e0cef0234f235789e383c1a7cd6cb3c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b639661db139c3abba4602bea92220639e0cef0234f235789e383c1a7cd6cb3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:22:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:22:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b639661db139c3abba4602bea92220639e0cef0234f235789e383c1a7cd6cb3c"} {"level":"info","ts":"2026-07-14T20:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b639661db139c3abba4602bea92220639e0cef0234f235789e383c1a7cd6cb3c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b639661db139c3abba4602bea92220639e0cef0234f235789e383c1a7cd6cb3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:22:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:22:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b639661db139c3abba4602bea92220639e0cef0234f235789e383c1a7cd6cb3c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-14T20:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b639661db139c3abba4602bea92220639e0cef0234f235789e383c1a7cd6cb3c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b639661db139c3abba4602bea92220639e0cef0234f235789e383c1a7cd6cb3c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T20:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b639661db139c3abba4602bea92220639e0cef0234f235789e383c1a7cd6cb3c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b639661db139c3abba4602bea92220639e0cef0234f235789e383c1a7cd6cb3c"} {"level":"debug","ts":"2026-07-14T20:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b639661db139c3abba4602bea92220639e0cef0234f235789e383c1a7cd6cb3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:22:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:22:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b639661db139c3abba4602bea92220639e0cef0234f235789e383c1a7cd6cb3c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b639661db139c3abba4602bea92220639e0cef0234f235789e383c1a7cd6cb3c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b639661db139c3abba4602bea92220639e0cef0234f235789e383c1a7cd6cb3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:22:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:22:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b639661db139c3abba4602bea92220639e0cef0234f235789e383c1a7cd6cb3c"} {"level":"info","ts":"2026-07-14T20:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b639661db139c3abba4602bea92220639e0cef0234f235789e383c1a7cd6cb3c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b639661db139c3abba4602bea92220639e0cef0234f235789e383c1a7cd6cb3c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b639661db139c3abba4602bea92220639e0cef0234f235789e383c1a7cd6cb3c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b639661db139c3abba4602bea92220639e0cef0234f235789e383c1a7cd6cb3c"} {"level":"debug","ts":"2026-07-14T20:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b639661db139c3abba4602bea92220639e0cef0234f235789e383c1a7cd6cb3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:22:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:22:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b639661db139c3abba4602bea92220639e0cef0234f235789e383c1a7cd6cb3c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b639661db139c3abba4602bea92220639e0cef0234f235789e383c1a7cd6cb3c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b639661db139c3abba4602bea92220639e0cef0234f235789e383c1a7cd6cb3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:22:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:22:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b639661db139c3abba4602bea92220639e0cef0234f235789e383c1a7cd6cb3c"} {"level":"info","ts":"2026-07-14T20:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b639661db139c3abba4602bea92220639e0cef0234f235789e383c1a7cd6cb3c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"850c6f9b19f2e6867c79d7d9d65046a38257222772e1ba471177620d907bc3db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:22:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:22:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/850c6f9b19f2e6867c79d7d9d65046a38257222772e1ba471177620d907bc3db"} {"level":"info","ts":"2026-07-14T20:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"850c6f9b19f2e6867c79d7d9d65046a38257222772e1ba471177620d907bc3db","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b639661db139c3abba4602bea92220639e0cef0234f235789e383c1a7cd6cb3c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffc8bd6df7cf9642e92e8e2d4d23445451aa4cd9c3cb1b990dbd5a2ba1ece375","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:22:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:22:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffc8bd6df7cf9642e92e8e2d4d23445451aa4cd9c3cb1b990dbd5a2ba1ece375","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"850c6f9b19f2e6867c79d7d9d65046a38257222772e1ba471177620d907bc3db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:22:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:22:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["850c6f9b19f2e6867c79d7d9d65046a38257222772e1ba471177620d907bc3db"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b639661db139c3abba4602bea92220639e0cef0234f235789e383c1a7cd6cb3c"} {"level":"info","ts":"2026-07-14T20:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"850c6f9b19f2e6867c79d7d9d65046a38257222772e1ba471177620d907bc3db","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b639661db139c3abba4602bea92220639e0cef0234f235789e383c1a7cd6cb3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:22:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:22:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b639661db139c3abba4602bea92220639e0cef0234f235789e383c1a7cd6cb3c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffc8bd6df7cf9642e92e8e2d4d23445451aa4cd9c3cb1b990dbd5a2ba1ece375"} {"level":"info","ts":"2026-07-14T20:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b639661db139c3abba4602bea92220639e0cef0234f235789e383c1a7cd6cb3c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffc8bd6df7cf9642e92e8e2d4d23445451aa4cd9c3cb1b990dbd5a2ba1ece375","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:22:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:22:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ffc8bd6df7cf9642e92e8e2d4d23445451aa4cd9c3cb1b990dbd5a2ba1ece375"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/850c6f9b19f2e6867c79d7d9d65046a38257222772e1ba471177620d907bc3db"} {"level":"info","ts":"2026-07-14T20:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b639661db139c3abba4602bea92220639e0cef0234f235789e383c1a7cd6cb3c"} {"level":"info","ts":"2026-07-14T20:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffc8bd6df7cf9642e92e8e2d4d23445451aa4cd9c3cb1b990dbd5a2ba1ece375","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"850c6f9b19f2e6867c79d7d9d65046a38257222772e1ba471177620d907bc3db","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b639661db139c3abba4602bea92220639e0cef0234f235789e383c1a7cd6cb3c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c9b65c949e1d48a6b1cfa1a7568066a47ced899e0af888985cf621659bb51ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:22:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:22:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c9b65c949e1d48a6b1cfa1a7568066a47ced899e0af888985cf621659bb51ad"} {"level":"info","ts":"2026-07-14T20:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c9b65c949e1d48a6b1cfa1a7568066a47ced899e0af888985cf621659bb51ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffc8bd6df7cf9642e92e8e2d4d23445451aa4cd9c3cb1b990dbd5a2ba1ece375","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:22:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:22:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffc8bd6df7cf9642e92e8e2d4d23445451aa4cd9c3cb1b990dbd5a2ba1ece375"} {"level":"info","ts":"2026-07-14T20:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffc8bd6df7cf9642e92e8e2d4d23445451aa4cd9c3cb1b990dbd5a2ba1ece375","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c9b65c949e1d48a6b1cfa1a7568066a47ced899e0af888985cf621659bb51ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffc8bd6df7cf9642e92e8e2d4d23445451aa4cd9c3cb1b990dbd5a2ba1ece375","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:22:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:22:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ffc8bd6df7cf9642e92e8e2d4d23445451aa4cd9c3cb1b990dbd5a2ba1ece375"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c9b65c949e1d48a6b1cfa1a7568066a47ced899e0af888985cf621659bb51ad"} {"level":"info","ts":"2026-07-14T20:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffc8bd6df7cf9642e92e8e2d4d23445451aa4cd9c3cb1b990dbd5a2ba1ece375","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c9b65c949e1d48a6b1cfa1a7568066a47ced899e0af888985cf621659bb51ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:22:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:22:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6c9b65c949e1d48a6b1cfa1a7568066a47ced899e0af888985cf621659bb51ad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffc8bd6df7cf9642e92e8e2d4d23445451aa4cd9c3cb1b990dbd5a2ba1ece375"} {"level":"info","ts":"2026-07-14T20:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c9b65c949e1d48a6b1cfa1a7568066a47ced899e0af888985cf621659bb51ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffc8bd6df7cf9642e92e8e2d4d23445451aa4cd9c3cb1b990dbd5a2ba1ece375","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:22:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:22:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffc8bd6df7cf9642e92e8e2d4d23445451aa4cd9c3cb1b990dbd5a2ba1ece375"} {"level":"info","ts":"2026-07-14T20:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffc8bd6df7cf9642e92e8e2d4d23445451aa4cd9c3cb1b990dbd5a2ba1ece375","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c9b65c949e1d48a6b1cfa1a7568066a47ced899e0af888985cf621659bb51ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:22:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:22:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c9b65c949e1d48a6b1cfa1a7568066a47ced899e0af888985cf621659bb51ad"} {"level":"info","ts":"2026-07-14T20:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c9b65c949e1d48a6b1cfa1a7568066a47ced899e0af888985cf621659bb51ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34ca162416bac2363210998ad42dcc01f48f1e7e6c1d52ae7eef428ffe540ec8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:22:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:22:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34ca162416bac2363210998ad42dcc01f48f1e7e6c1d52ae7eef428ffe540ec8"} {"level":"info","ts":"2026-07-14T20:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34ca162416bac2363210998ad42dcc01f48f1e7e6c1d52ae7eef428ffe540ec8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffc8bd6df7cf9642e92e8e2d4d23445451aa4cd9c3cb1b990dbd5a2ba1ece375","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c9b65c949e1d48a6b1cfa1a7568066a47ced899e0af888985cf621659bb51ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:22:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:22:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6c9b65c949e1d48a6b1cfa1a7568066a47ced899e0af888985cf621659bb51ad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffc8bd6df7cf9642e92e8e2d4d23445451aa4cd9c3cb1b990dbd5a2ba1ece375"} {"level":"info","ts":"2026-07-14T20:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c9b65c949e1d48a6b1cfa1a7568066a47ced899e0af888985cf621659bb51ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34ca162416bac2363210998ad42dcc01f48f1e7e6c1d52ae7eef428ffe540ec8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:22:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:22:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["34ca162416bac2363210998ad42dcc01f48f1e7e6c1d52ae7eef428ffe540ec8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c9b65c949e1d48a6b1cfa1a7568066a47ced899e0af888985cf621659bb51ad"} {"level":"info","ts":"2026-07-14T20:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34ca162416bac2363210998ad42dcc01f48f1e7e6c1d52ae7eef428ffe540ec8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffc8bd6df7cf9642e92e8e2d4d23445451aa4cd9c3cb1b990dbd5a2ba1ece375","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:22:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:22:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ffc8bd6df7cf9642e92e8e2d4d23445451aa4cd9c3cb1b990dbd5a2ba1ece375"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34ca162416bac2363210998ad42dcc01f48f1e7e6c1d52ae7eef428ffe540ec8"} {"level":"info","ts":"2026-07-14T20:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffc8bd6df7cf9642e92e8e2d4d23445451aa4cd9c3cb1b990dbd5a2ba1ece375","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c9b65c949e1d48a6b1cfa1a7568066a47ced899e0af888985cf621659bb51ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:22:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:22:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c9b65c949e1d48a6b1cfa1a7568066a47ced899e0af888985cf621659bb51ad"} {"level":"info","ts":"2026-07-14T20:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c9b65c949e1d48a6b1cfa1a7568066a47ced899e0af888985cf621659bb51ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae277ecbc8c578edfe4f058b16407d98618208bc9007af82891c1c45fb9f5693","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:22:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:22:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae277ecbc8c578edfe4f058b16407d98618208bc9007af82891c1c45fb9f5693"} {"level":"info","ts":"2026-07-14T20:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae277ecbc8c578edfe4f058b16407d98618208bc9007af82891c1c45fb9f5693","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34ca162416bac2363210998ad42dcc01f48f1e7e6c1d52ae7eef428ffe540ec8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:22:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:22:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34ca162416bac2363210998ad42dcc01f48f1e7e6c1d52ae7eef428ffe540ec8"} {"level":"info","ts":"2026-07-14T20:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffc8bd6df7cf9642e92e8e2d4d23445451aa4cd9c3cb1b990dbd5a2ba1ece375"} {"level":"info","ts":"2026-07-14T20:22:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34ca162416bac2363210998ad42dcc01f48f1e7e6c1d52ae7eef428ffe540ec8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:22:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffc8bd6df7cf9642e92e8e2d4d23445451aa4cd9c3cb1b990dbd5a2ba1ece375","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:22:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c9b65c949e1d48a6b1cfa1a7568066a47ced899e0af888985cf621659bb51ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:22:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae277ecbc8c578edfe4f058b16407d98618208bc9007af82891c1c45fb9f5693","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:22:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:22:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ae277ecbc8c578edfe4f058b16407d98618208bc9007af82891c1c45fb9f5693"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:22:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c9b65c949e1d48a6b1cfa1a7568066a47ced899e0af888985cf621659bb51ad"} {"level":"info","ts":"2026-07-14T20:22:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae277ecbc8c578edfe4f058b16407d98618208bc9007af82891c1c45fb9f5693","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:22:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3caee536c5f5c00081618c5a517bf946c469644453d2c0dfbc5b946c9c6477a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:22:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:22:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:22:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae277ecbc8c578edfe4f058b16407d98618208bc9007af82891c1c45fb9f5693"} {"level":"info","ts":"2026-07-14T20:22:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3caee536c5f5c00081618c5a517bf946c469644453d2c0dfbc5b946c9c6477a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:22:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34ca162416bac2363210998ad42dcc01f48f1e7e6c1d52ae7eef428ffe540ec8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:22:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:22:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["34ca162416bac2363210998ad42dcc01f48f1e7e6c1d52ae7eef428ffe540ec8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:22:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3caee536c5f5c00081618c5a517bf946c469644453d2c0dfbc5b946c9c6477a"} {"level":"info","ts":"2026-07-14T20:22:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34ca162416bac2363210998ad42dcc01f48f1e7e6c1d52ae7eef428ffe540ec8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:22:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c9b65c949e1d48a6b1cfa1a7568066a47ced899e0af888985cf621659bb51ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:22:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:22:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6c9b65c949e1d48a6b1cfa1a7568066a47ced899e0af888985cf621659bb51ad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:22:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34ca162416bac2363210998ad42dcc01f48f1e7e6c1d52ae7eef428ffe540ec8"} {"level":"info","ts":"2026-07-14T20:22:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c9b65c949e1d48a6b1cfa1a7568066a47ced899e0af888985cf621659bb51ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:22:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae277ecbc8c578edfe4f058b16407d98618208bc9007af82891c1c45fb9f5693","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:22:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:22:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:22:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae277ecbc8c578edfe4f058b16407d98618208bc9007af82891c1c45fb9f5693"} {"level":"info","ts":"2026-07-14T20:22:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae277ecbc8c578edfe4f058b16407d98618208bc9007af82891c1c45fb9f5693","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:22:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3caee536c5f5c00081618c5a517bf946c469644453d2c0dfbc5b946c9c6477a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:22:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:22:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:22:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3caee536c5f5c00081618c5a517bf946c469644453d2c0dfbc5b946c9c6477a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:22:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34ca162416bac2363210998ad42dcc01f48f1e7e6c1d52ae7eef428ffe540ec8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:22:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c9b65c949e1d48a6b1cfa1a7568066a47ced899e0af888985cf621659bb51ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:22:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae277ecbc8c578edfe4f058b16407d98618208bc9007af82891c1c45fb9f5693","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:22:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:22:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ae277ecbc8c578edfe4f058b16407d98618208bc9007af82891c1c45fb9f5693"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:22:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3caee536c5f5c00081618c5a517bf946c469644453d2c0dfbc5b946c9c6477a"} {"level":"info","ts":"2026-07-14T20:22:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae277ecbc8c578edfe4f058b16407d98618208bc9007af82891c1c45fb9f5693","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:22:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3caee536c5f5c00081618c5a517bf946c469644453d2c0dfbc5b946c9c6477a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:22:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:22:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c3caee536c5f5c00081618c5a517bf946c469644453d2c0dfbc5b946c9c6477a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:22:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3caee536c5f5c00081618c5a517bf946c469644453d2c0dfbc5b946c9c6477a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:22:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae277ecbc8c578edfe4f058b16407d98618208bc9007af82891c1c45fb9f5693","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:22:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff165ae61ca6d895db825ec731b71546ce838d45dee4a3ac0ed7ee796df02823","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:22:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:22:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:22:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34ca162416bac2363210998ad42dcc01f48f1e7e6c1d52ae7eef428ffe540ec8"} {"level":"info","ts":"2026-07-14T20:22:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff165ae61ca6d895db825ec731b71546ce838d45dee4a3ac0ed7ee796df02823","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:22:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3caee536c5f5c00081618c5a517bf946c469644453d2c0dfbc5b946c9c6477a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:22:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c2ef6ea18b7f8318ce777b6b49de6afdb8a76f914ece68f541bb4a79355ddfd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:22:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:22:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:22:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c9b65c949e1d48a6b1cfa1a7568066a47ced899e0af888985cf621659bb51ad"} {"level":"info","ts":"2026-07-14T20:22:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c2ef6ea18b7f8318ce777b6b49de6afdb8a76f914ece68f541bb4a79355ddfd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:22:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff165ae61ca6d895db825ec731b71546ce838d45dee4a3ac0ed7ee796df02823","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:22:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c2ef6ea18b7f8318ce777b6b49de6afdb8a76f914ece68f541bb4a79355ddfd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:22:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c2ef6ea18b7f8318ce777b6b49de6afdb8a76f914ece68f541bb4a79355ddfd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:22:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae277ecbc8c578edfe4f058b16407d98618208bc9007af82891c1c45fb9f5693"} {"level":"debug","ts":"2026-07-14T20:22:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff165ae61ca6d895db825ec731b71546ce838d45dee4a3ac0ed7ee796df02823","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:22:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c2ef6ea18b7f8318ce777b6b49de6afdb8a76f914ece68f541bb4a79355ddfd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:22:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3caee536c5f5c00081618c5a517bf946c469644453d2c0dfbc5b946c9c6477a"} {"level":"debug","ts":"2026-07-14T20:22:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff165ae61ca6d895db825ec731b71546ce838d45dee4a3ac0ed7ee796df02823","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:22:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:22:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:22:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff165ae61ca6d895db825ec731b71546ce838d45dee4a3ac0ed7ee796df02823","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:22:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff165ae61ca6d895db825ec731b71546ce838d45dee4a3ac0ed7ee796df02823","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:22:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff165ae61ca6d895db825ec731b71546ce838d45dee4a3ac0ed7ee796df02823"} {"level":"debug","ts":"2026-07-14T20:22:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c2ef6ea18b7f8318ce777b6b49de6afdb8a76f914ece68f541bb4a79355ddfd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:22:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:22:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:22:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c2ef6ea18b7f8318ce777b6b49de6afdb8a76f914ece68f541bb4a79355ddfd"} {"level":"info","ts":"2026-07-14T20:22:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c2ef6ea18b7f8318ce777b6b49de6afdb8a76f914ece68f541bb4a79355ddfd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:22:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c2ef6ea18b7f8318ce777b6b49de6afdb8a76f914ece68f541bb4a79355ddfd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:22:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:22:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c2ef6ea18b7f8318ce777b6b49de6afdb8a76f914ece68f541bb4a79355ddfd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:22:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff165ae61ca6d895db825ec731b71546ce838d45dee4a3ac0ed7ee796df02823"} {"level":"info","ts":"2026-07-14T20:22:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c2ef6ea18b7f8318ce777b6b49de6afdb8a76f914ece68f541bb4a79355ddfd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:22:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff165ae61ca6d895db825ec731b71546ce838d45dee4a3ac0ed7ee796df02823","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:22:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:22:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ff165ae61ca6d895db825ec731b71546ce838d45dee4a3ac0ed7ee796df02823"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:22:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c2ef6ea18b7f8318ce777b6b49de6afdb8a76f914ece68f541bb4a79355ddfd"} {"level":"info","ts":"2026-07-14T20:22:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff165ae61ca6d895db825ec731b71546ce838d45dee4a3ac0ed7ee796df02823","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:22:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c2ef6ea18b7f8318ce777b6b49de6afdb8a76f914ece68f541bb4a79355ddfd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:22:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:22:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:22:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c2ef6ea18b7f8318ce777b6b49de6afdb8a76f914ece68f541bb4a79355ddfd"} {"level":"info","ts":"2026-07-14T20:22:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c2ef6ea18b7f8318ce777b6b49de6afdb8a76f914ece68f541bb4a79355ddfd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:22:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff165ae61ca6d895db825ec731b71546ce838d45dee4a3ac0ed7ee796df02823","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:22:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:22:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:22:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff165ae61ca6d895db825ec731b71546ce838d45dee4a3ac0ed7ee796df02823","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:22:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4720076698bae82c79bc9a325deeeb8d8302bcbbcc920f63cc848a9797f5cbff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:22:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:22:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:22:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff165ae61ca6d895db825ec731b71546ce838d45dee4a3ac0ed7ee796df02823"} {"level":"info","ts":"2026-07-14T20:22:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4720076698bae82c79bc9a325deeeb8d8302bcbbcc920f63cc848a9797f5cbff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:22:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c2ef6ea18b7f8318ce777b6b49de6afdb8a76f914ece68f541bb4a79355ddfd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:22:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:22:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c2ef6ea18b7f8318ce777b6b49de6afdb8a76f914ece68f541bb4a79355ddfd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:22:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4720076698bae82c79bc9a325deeeb8d8302bcbbcc920f63cc848a9797f5cbff"} {"level":"info","ts":"2026-07-14T20:22:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c2ef6ea18b7f8318ce777b6b49de6afdb8a76f914ece68f541bb4a79355ddfd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:22:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff165ae61ca6d895db825ec731b71546ce838d45dee4a3ac0ed7ee796df02823","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:22:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:22:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ff165ae61ca6d895db825ec731b71546ce838d45dee4a3ac0ed7ee796df02823"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:22:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff165ae61ca6d895db825ec731b71546ce838d45dee4a3ac0ed7ee796df02823","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:22:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4720076698bae82c79bc9a325deeeb8d8302bcbbcc920f63cc848a9797f5cbff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:22:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:22:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4720076698bae82c79bc9a325deeeb8d8302bcbbcc920f63cc848a9797f5cbff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:22:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c2ef6ea18b7f8318ce777b6b49de6afdb8a76f914ece68f541bb4a79355ddfd"} {"level":"info","ts":"2026-07-14T20:22:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4720076698bae82c79bc9a325deeeb8d8302bcbbcc920f63cc848a9797f5cbff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:22:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c2ef6ea18b7f8318ce777b6b49de6afdb8a76f914ece68f541bb4a79355ddfd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:22:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff165ae61ca6d895db825ec731b71546ce838d45dee4a3ac0ed7ee796df02823","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:22:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:22:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:22:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff165ae61ca6d895db825ec731b71546ce838d45dee4a3ac0ed7ee796df02823"} {"level":"info","ts":"2026-07-14T20:22:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff165ae61ca6d895db825ec731b71546ce838d45dee4a3ac0ed7ee796df02823","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:22:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4720076698bae82c79bc9a325deeeb8d8302bcbbcc920f63cc848a9797f5cbff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:22:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:22:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:22:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4720076698bae82c79bc9a325deeeb8d8302bcbbcc920f63cc848a9797f5cbff"} {"level":"info","ts":"2026-07-14T20:22:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4720076698bae82c79bc9a325deeeb8d8302bcbbcc920f63cc848a9797f5cbff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:22:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a9b6c05a924b20fe69951762aad5446663e86f60acb3effd3af9a88e547a710","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:22:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:22:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:22:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a9b6c05a924b20fe69951762aad5446663e86f60acb3effd3af9a88e547a710","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:22:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff165ae61ca6d895db825ec731b71546ce838d45dee4a3ac0ed7ee796df02823","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:22:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:22:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ff165ae61ca6d895db825ec731b71546ce838d45dee4a3ac0ed7ee796df02823"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:22:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c2ef6ea18b7f8318ce777b6b49de6afdb8a76f914ece68f541bb4a79355ddfd"} {"level":"info","ts":"2026-07-14T20:22:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff165ae61ca6d895db825ec731b71546ce838d45dee4a3ac0ed7ee796df02823","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:22:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97590f5cd28ec35ed98f78ac959e5d16f8e7df75ca6a5d12abd046201c08d912","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:22:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:22:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:22:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a9b6c05a924b20fe69951762aad5446663e86f60acb3effd3af9a88e547a710"} {"level":"info","ts":"2026-07-14T20:22:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97590f5cd28ec35ed98f78ac959e5d16f8e7df75ca6a5d12abd046201c08d912","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:22:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4720076698bae82c79bc9a325deeeb8d8302bcbbcc920f63cc848a9797f5cbff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:22:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:22:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4720076698bae82c79bc9a325deeeb8d8302bcbbcc920f63cc848a9797f5cbff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:22:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4720076698bae82c79bc9a325deeeb8d8302bcbbcc920f63cc848a9797f5cbff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:22:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a9b6c05a924b20fe69951762aad5446663e86f60acb3effd3af9a88e547a710","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:22:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:22:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7a9b6c05a924b20fe69951762aad5446663e86f60acb3effd3af9a88e547a710"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:22:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff165ae61ca6d895db825ec731b71546ce838d45dee4a3ac0ed7ee796df02823"} {"level":"info","ts":"2026-07-14T20:22:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a9b6c05a924b20fe69951762aad5446663e86f60acb3effd3af9a88e547a710","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:22:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff165ae61ca6d895db825ec731b71546ce838d45dee4a3ac0ed7ee796df02823","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:22:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97590f5cd28ec35ed98f78ac959e5d16f8e7df75ca6a5d12abd046201c08d912","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:22:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:22:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:22:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97590f5cd28ec35ed98f78ac959e5d16f8e7df75ca6a5d12abd046201c08d912"} {"level":"info","ts":"2026-07-14T20:22:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97590f5cd28ec35ed98f78ac959e5d16f8e7df75ca6a5d12abd046201c08d912","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:22:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4720076698bae82c79bc9a325deeeb8d8302bcbbcc920f63cc848a9797f5cbff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:22:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:22:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:22:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4720076698bae82c79bc9a325deeeb8d8302bcbbcc920f63cc848a9797f5cbff"} {"level":"info","ts":"2026-07-14T20:22:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4720076698bae82c79bc9a325deeeb8d8302bcbbcc920f63cc848a9797f5cbff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:22:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a9b6c05a924b20fe69951762aad5446663e86f60acb3effd3af9a88e547a710","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:22:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:22:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:22:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a9b6c05a924b20fe69951762aad5446663e86f60acb3effd3af9a88e547a710"} {"level":"info","ts":"2026-07-14T20:22:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97590f5cd28ec35ed98f78ac959e5d16f8e7df75ca6a5d12abd046201c08d912"} {"level":"info","ts":"2026-07-14T20:22:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a9b6c05a924b20fe69951762aad5446663e86f60acb3effd3af9a88e547a710","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:22:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97590f5cd28ec35ed98f78ac959e5d16f8e7df75ca6a5d12abd046201c08d912","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:22:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:22:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["97590f5cd28ec35ed98f78ac959e5d16f8e7df75ca6a5d12abd046201c08d912"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:22:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4720076698bae82c79bc9a325deeeb8d8302bcbbcc920f63cc848a9797f5cbff"} {"level":"info","ts":"2026-07-14T20:22:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a9b6c05a924b20fe69951762aad5446663e86f60acb3effd3af9a88e547a710"} {"level":"info","ts":"2026-07-14T20:22:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97590f5cd28ec35ed98f78ac959e5d16f8e7df75ca6a5d12abd046201c08d912","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:22:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4720076698bae82c79bc9a325deeeb8d8302bcbbcc920f63cc848a9797f5cbff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:22:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:22:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4720076698bae82c79bc9a325deeeb8d8302bcbbcc920f63cc848a9797f5cbff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:22:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97590f5cd28ec35ed98f78ac959e5d16f8e7df75ca6a5d12abd046201c08d912"} {"level":"info","ts":"2026-07-14T20:22:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4720076698bae82c79bc9a325deeeb8d8302bcbbcc920f63cc848a9797f5cbff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:22:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a9b6c05a924b20fe69951762aad5446663e86f60acb3effd3af9a88e547a710","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:22:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:22:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7a9b6c05a924b20fe69951762aad5446663e86f60acb3effd3af9a88e547a710"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:22:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4720076698bae82c79bc9a325deeeb8d8302bcbbcc920f63cc848a9797f5cbff"} {"level":"info","ts":"2026-07-14T20:22:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a9b6c05a924b20fe69951762aad5446663e86f60acb3effd3af9a88e547a710","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:22:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97590f5cd28ec35ed98f78ac959e5d16f8e7df75ca6a5d12abd046201c08d912","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:22:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4720076698bae82c79bc9a325deeeb8d8302bcbbcc920f63cc848a9797f5cbff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:22:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a9b6c05a924b20fe69951762aad5446663e86f60acb3effd3af9a88e547a710","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:22:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:22:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:22:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a9b6c05a924b20fe69951762aad5446663e86f60acb3effd3af9a88e547a710"} {"level":"info","ts":"2026-07-14T20:22:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a9b6c05a924b20fe69951762aad5446663e86f60acb3effd3af9a88e547a710","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:22:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a9b6c05a924b20fe69951762aad5446663e86f60acb3effd3af9a88e547a710","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:22:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:22:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7a9b6c05a924b20fe69951762aad5446663e86f60acb3effd3af9a88e547a710"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:22:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a9b6c05a924b20fe69951762aad5446663e86f60acb3effd3af9a88e547a710"} {"level":"info","ts":"2026-07-14T20:22:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a9b6c05a924b20fe69951762aad5446663e86f60acb3effd3af9a88e547a710","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:22:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a9b6c05a924b20fe69951762aad5446663e86f60acb3effd3af9a88e547a710","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:22:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:22:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7a9b6c05a924b20fe69951762aad5446663e86f60acb3effd3af9a88e547a710"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:22:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a9b6c05a924b20fe69951762aad5446663e86f60acb3effd3af9a88e547a710"} {"level":"error","ts":"2026-07-14T20:22:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7a9b6c05a924b20fe69951762aad5446663e86f60acb3effd3af9a88e547a710","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7a9b6c05a924b20fe69951762aad5446663e86f60acb3effd3af9a88e547a710\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T20:22:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a9b6c05a924b20fe69951762aad5446663e86f60acb3effd3af9a88e547a710","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:22:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a9b6c05a924b20fe69951762aad5446663e86f60acb3effd3af9a88e547a710","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:22:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ae4a6676-614e-4191-bf1e-b5989b30da7e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:50884","PortSpecifier":{"PortValue":50884}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ae4a6676-614e-4191-bf1e-b5989b30da7e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-76db83.apps.f432e014-de42-4e5c-8c87-f51ff4616134.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T20:22:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ae4a6676-614e-4191-bf1e-b5989b30da7e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:50884","PortSpecifier":{"PortValue":50884}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784060569,"nanos":238295659},"http":{"id":"ae4a6676-614e-4191-bf1e-b5989b30da7e","method":"POST","headers":{":authority":"e2e-shared-a-76db83.apps.f432e014-de42-4e5c-8c87-f51ff4616134.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T20:22:49Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ae4a6676-614e-4191-bf1e-b5989b30da7e","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T20:22:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ae4a6676-614e-4191-bf1e-b5989b30da7e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"49ca3997-2250-49c1-a4df-f91ee4d9d217","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=10e4cf38-4c6b-49fd-94e4-421e73bde9fc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f51ff4616134"]}} {"level":"debug","ts":"2026-07-14T20:22:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ae4a6676-614e-4191-bf1e-b5989b30da7e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f51ff4616134"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=10e4cf38-4c6b-49fd-94e4-421e73bde9fc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"49ca3997-2250-49c1-a4df-f91ee4d9d217","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4fef5f539b37e4ed510c125799947d892a376acd90ebba131ba48acc58ad39f1"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-76db83.apps.f432e014-de42-4e5c-8c87-f51ff4616134.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T20:22:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ae4a6676-614e-4191-bf1e-b5989b30da7e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T20:22:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ae4a6676-614e-4191-bf1e-b5989b30da7e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T20:22:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ae4a6676-614e-4191-bf1e-b5989b30da7e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-76db83/auth-test-model-76db83\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-76db83/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T20:22:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ae4a6676-614e-4191-bf1e-b5989b30da7e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T20:22:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ae4a6676-614e-4191-bf1e-b5989b30da7e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T20:22:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ae4a6676-614e-4191-bf1e-b5989b30da7e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T20:22:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ae4a6676-614e-4191-bf1e-b5989b30da7e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T20:22:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ae4a6676-614e-4191-bf1e-b5989b30da7e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T20:22:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fd03b0de-4c1c-48b7-99b3-ae8e99dc5b74","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:56560","PortSpecifier":{"PortValue":56560}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fd03b0de-4c1c-48b7-99b3-ae8e99dc5b74","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-ecc78d.apps.f432e014-de42-4e5c-8c87-f51ff4616134.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T20:22:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fd03b0de-4c1c-48b7-99b3-ae8e99dc5b74","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:56560","PortSpecifier":{"PortValue":56560}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784060569,"nanos":307068942},"http":{"id":"fd03b0de-4c1c-48b7-99b3-ae8e99dc5b74","method":"POST","headers":{":authority":"e2e-shared-b-ecc78d.apps.f432e014-de42-4e5c-8c87-f51ff4616134.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T20:22:49Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fd03b0de-4c1c-48b7-99b3-ae8e99dc5b74","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T20:22:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fd03b0de-4c1c-48b7-99b3-ae8e99dc5b74","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"49ca3997-2250-49c1-a4df-f91ee4d9d217","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=10e4cf38-4c6b-49fd-94e4-421e73bde9fc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f51ff4616134"]}} {"level":"debug","ts":"2026-07-14T20:22:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fd03b0de-4c1c-48b7-99b3-ae8e99dc5b74","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f51ff4616134"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=10e4cf38-4c6b-49fd-94e4-421e73bde9fc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"49ca3997-2250-49c1-a4df-f91ee4d9d217","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"850c6f9b19f2e6867c79d7d9d65046a38257222772e1ba471177620d907bc3db"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-ecc78d.apps.f432e014-de42-4e5c-8c87-f51ff4616134.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T20:22:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fd03b0de-4c1c-48b7-99b3-ae8e99dc5b74","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T20:22:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fd03b0de-4c1c-48b7-99b3-ae8e99dc5b74","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T20:22:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fd03b0de-4c1c-48b7-99b3-ae8e99dc5b74","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ecc78d/auth-test-model-ecc78d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-ecc78d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T20:22:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fd03b0de-4c1c-48b7-99b3-ae8e99dc5b74","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T20:22:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fd03b0de-4c1c-48b7-99b3-ae8e99dc5b74","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T20:22:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fd03b0de-4c1c-48b7-99b3-ae8e99dc5b74","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-14T20:22:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fd03b0de-4c1c-48b7-99b3-ae8e99dc5b74","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T20:22:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fd03b0de-4c1c-48b7-99b3-ae8e99dc5b74","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T20:22:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3205d977-7c30-42fd-9236-1881c24373df","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:50898","PortSpecifier":{"PortValue":50898}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3205d977-7c30-42fd-9236-1881c24373df","method":"GET","path":"/maas-api/v1/api-keys/7fc0d1ed-8d9a-4416-9384-90e91bdd7181","host":"e2e-shared-a-76db83.apps.f432e014-de42-4e5c-8c87-f51ff4616134.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T20:22:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3205d977-7c30-42fd-9236-1881c24373df","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:50898","PortSpecifier":{"PortValue":50898}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784060569,"nanos":375835670},"http":{"id":"3205d977-7c30-42fd-9236-1881c24373df","method":"GET","headers":{":authority":"e2e-shared-a-76db83.apps.f432e014-de42-4e5c-8c87-f51ff4616134.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/7fc0d1ed-8d9a-4416-9384-90e91bdd7181",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T20:22:49Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3205d977-7c30-42fd-9236-1881c24373df","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T20:22:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3205d977-7c30-42fd-9236-1881c24373df","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"49ca3997-2250-49c1-a4df-f91ee4d9d217","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=10e4cf38-4c6b-49fd-94e4-421e73bde9fc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f51ff4616134"]}} {"level":"debug","ts":"2026-07-14T20:22:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3205d977-7c30-42fd-9236-1881c24373df","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f51ff4616134"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=10e4cf38-4c6b-49fd-94e4-421e73bde9fc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"49ca3997-2250-49c1-a4df-f91ee4d9d217","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4fef5f539b37e4ed510c125799947d892a376acd90ebba131ba48acc58ad39f1"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-76db83.apps.f432e014-de42-4e5c-8c87-f51ff4616134.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/7fc0d1ed-8d9a-4416-9384-90e91bdd7181",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T20:22:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3205d977-7c30-42fd-9236-1881c24373df","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T20:22:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3205d977-7c30-42fd-9236-1881c24373df","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T20:22:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3205d977-7c30-42fd-9236-1881c24373df","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-76db83/auth-test-model-76db83\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-76db83/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T20:22:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3205d977-7c30-42fd-9236-1881c24373df","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T20:22:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3205d977-7c30-42fd-9236-1881c24373df","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T20:22:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3205d977-7c30-42fd-9236-1881c24373df","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-14T20:22:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3205d977-7c30-42fd-9236-1881c24373df","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T20:22:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3205d977-7c30-42fd-9236-1881c24373df","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T20:22:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"62cbc74a-f8e4-4f54-99f0-5fe457773094","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:56574","PortSpecifier":{"PortValue":56574}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"62cbc74a-f8e4-4f54-99f0-5fe457773094","method":"GET","path":"/maas-api/v1/api-keys/550a3246-09d6-4445-be04-7c1094998024","host":"e2e-shared-b-ecc78d.apps.f432e014-de42-4e5c-8c87-f51ff4616134.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T20:22:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"62cbc74a-f8e4-4f54-99f0-5fe457773094","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:56574","PortSpecifier":{"PortValue":56574}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784060569,"nanos":413843503},"http":{"id":"62cbc74a-f8e4-4f54-99f0-5fe457773094","method":"GET","headers":{":authority":"e2e-shared-b-ecc78d.apps.f432e014-de42-4e5c-8c87-f51ff4616134.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/550a3246-09d6-4445-be04-7c1094998024",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T20:22:49Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"62cbc74a-f8e4-4f54-99f0-5fe457773094","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T20:22:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"62cbc74a-f8e4-4f54-99f0-5fe457773094","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"49ca3997-2250-49c1-a4df-f91ee4d9d217","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=10e4cf38-4c6b-49fd-94e4-421e73bde9fc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f51ff4616134"]}} {"level":"debug","ts":"2026-07-14T20:22:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"62cbc74a-f8e4-4f54-99f0-5fe457773094","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f51ff4616134"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=10e4cf38-4c6b-49fd-94e4-421e73bde9fc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"49ca3997-2250-49c1-a4df-f91ee4d9d217","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"850c6f9b19f2e6867c79d7d9d65046a38257222772e1ba471177620d907bc3db"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-ecc78d.apps.f432e014-de42-4e5c-8c87-f51ff4616134.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/550a3246-09d6-4445-be04-7c1094998024",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T20:22:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"62cbc74a-f8e4-4f54-99f0-5fe457773094","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T20:22:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"62cbc74a-f8e4-4f54-99f0-5fe457773094","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T20:22:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"62cbc74a-f8e4-4f54-99f0-5fe457773094","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ecc78d/auth-test-model-ecc78d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-ecc78d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T20:22:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"62cbc74a-f8e4-4f54-99f0-5fe457773094","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T20:22:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"62cbc74a-f8e4-4f54-99f0-5fe457773094","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T20:22:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"62cbc74a-f8e4-4f54-99f0-5fe457773094","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T20:22:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"62cbc74a-f8e4-4f54-99f0-5fe457773094","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T20:22:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"62cbc74a-f8e4-4f54-99f0-5fe457773094","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T20:23:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a5208346-c975-46cc-ae34-392c79ded7e5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:46992","PortSpecifier":{"PortValue":46992}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a5208346-c975-46cc-ae34-392c79ded7e5","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-76db83.apps.f432e014-de42-4e5c-8c87-f51ff4616134.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T20:23:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a5208346-c975-46cc-ae34-392c79ded7e5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:46992","PortSpecifier":{"PortValue":46992}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784060586,"nanos":799569105},"http":{"id":"a5208346-c975-46cc-ae34-392c79ded7e5","method":"POST","headers":{":authority":"e2e-shared-a-76db83.apps.f432e014-de42-4e5c-8c87-f51ff4616134.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T20:23:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a5208346-c975-46cc-ae34-392c79ded7e5","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T20:23:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a5208346-c975-46cc-ae34-392c79ded7e5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"49ca3997-2250-49c1-a4df-f91ee4d9d217","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=10e4cf38-4c6b-49fd-94e4-421e73bde9fc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f51ff4616134"]}} {"level":"debug","ts":"2026-07-14T20:23:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a5208346-c975-46cc-ae34-392c79ded7e5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f51ff4616134"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=10e4cf38-4c6b-49fd-94e4-421e73bde9fc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"49ca3997-2250-49c1-a4df-f91ee4d9d217","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4fef5f539b37e4ed510c125799947d892a376acd90ebba131ba48acc58ad39f1"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-76db83.apps.f432e014-de42-4e5c-8c87-f51ff4616134.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T20:23:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a5208346-c975-46cc-ae34-392c79ded7e5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T20:23:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a5208346-c975-46cc-ae34-392c79ded7e5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T20:23:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a5208346-c975-46cc-ae34-392c79ded7e5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-76db83/auth-test-model-76db83\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-76db83/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T20:23:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a5208346-c975-46cc-ae34-392c79ded7e5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T20:23:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a5208346-c975-46cc-ae34-392c79ded7e5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T20:23:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a5208346-c975-46cc-ae34-392c79ded7e5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T20:23:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a5208346-c975-46cc-ae34-392c79ded7e5","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T20:23:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a5208346-c975-46cc-ae34-392c79ded7e5","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T20:23:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"207643f1-b1df-43fa-b4cd-136be8783108","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:37566","PortSpecifier":{"PortValue":37566}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"207643f1-b1df-43fa-b4cd-136be8783108","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-ecc78d.apps.f432e014-de42-4e5c-8c87-f51ff4616134.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T20:23:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"207643f1-b1df-43fa-b4cd-136be8783108","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:37566","PortSpecifier":{"PortValue":37566}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784060586,"nanos":840217753},"http":{"id":"207643f1-b1df-43fa-b4cd-136be8783108","method":"POST","headers":{":authority":"e2e-shared-b-ecc78d.apps.f432e014-de42-4e5c-8c87-f51ff4616134.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T20:23:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"207643f1-b1df-43fa-b4cd-136be8783108","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T20:23:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"207643f1-b1df-43fa-b4cd-136be8783108","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"49ca3997-2250-49c1-a4df-f91ee4d9d217","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=10e4cf38-4c6b-49fd-94e4-421e73bde9fc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f51ff4616134"]}} {"level":"debug","ts":"2026-07-14T20:23:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"207643f1-b1df-43fa-b4cd-136be8783108","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f51ff4616134"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=10e4cf38-4c6b-49fd-94e4-421e73bde9fc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"49ca3997-2250-49c1-a4df-f91ee4d9d217","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"850c6f9b19f2e6867c79d7d9d65046a38257222772e1ba471177620d907bc3db"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-ecc78d.apps.f432e014-de42-4e5c-8c87-f51ff4616134.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T20:23:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"207643f1-b1df-43fa-b4cd-136be8783108","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T20:23:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"207643f1-b1df-43fa-b4cd-136be8783108","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T20:23:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"207643f1-b1df-43fa-b4cd-136be8783108","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ecc78d/auth-test-model-ecc78d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-ecc78d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T20:23:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"207643f1-b1df-43fa-b4cd-136be8783108","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T20:23:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"207643f1-b1df-43fa-b4cd-136be8783108","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T20:23:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"207643f1-b1df-43fa-b4cd-136be8783108","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-14T20:23:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"207643f1-b1df-43fa-b4cd-136be8783108","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T20:23:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"207643f1-b1df-43fa-b4cd-136be8783108","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T20:23:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d717859c-052d-4dc2-876f-df1700fe33b0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:47004","PortSpecifier":{"PortValue":47004}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d717859c-052d-4dc2-876f-df1700fe33b0","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-76db83.apps.f432e014-de42-4e5c-8c87-f51ff4616134.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T20:23:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d717859c-052d-4dc2-876f-df1700fe33b0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:47004","PortSpecifier":{"PortValue":47004}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784060586,"nanos":881580441},"http":{"id":"d717859c-052d-4dc2-876f-df1700fe33b0","method":"GET","headers":{":authority":"e2e-shared-a-76db83.apps.f432e014-de42-4e5c-8c87-f51ff4616134.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T20:23:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d717859c-052d-4dc2-876f-df1700fe33b0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-UOpsfARCrHXhBO6u_PlPVtBDrGNVRMW7plLLFQ8VR9ZrSIAPn8f0xTvEpEFt"} {"level":"debug","ts":"2026-07-14T20:23:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d717859c-052d-4dc2-876f-df1700fe33b0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-76db83.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-UOpsfARCrHXhBO6u_PlPVtBDrGNVRMW7plLLFQ8VR9ZrSIAPn8f0xTvEpEFt\"}"} {"level":"debug","ts":"2026-07-14T20:23:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d717859c-052d-4dc2-876f-df1700fe33b0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-76db83.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a1fba54c-b559-4011-8fd6-bf9f3bb0135d","keyName":"e2e-auth-iso-a-21188b","subscription":"e2e-auth-iso-f1ceaa","tenant":"e2e-shared-a-76db83","userId":"a1fba54c-b559-4011-8fd6-bf9f3bb0135d","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T20:23:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d717859c-052d-4dc2-876f-df1700fe33b0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T20:23:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d717859c-052d-4dc2-876f-df1700fe33b0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T20:23:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d717859c-052d-4dc2-876f-df1700fe33b0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T20:23:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d717859c-052d-4dc2-876f-df1700fe33b0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-76db83/auth-test-model-76db83\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-76db83/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T20:23:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d717859c-052d-4dc2-876f-df1700fe33b0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-f1ceaa"} {"level":"debug","ts":"2026-07-14T20:23:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d717859c-052d-4dc2-876f-df1700fe33b0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-14T20:23:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d717859c-052d-4dc2-876f-df1700fe33b0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T20:23:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d717859c-052d-4dc2-876f-df1700fe33b0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T20:23:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d717859c-052d-4dc2-876f-df1700fe33b0","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T20:23:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d717859c-052d-4dc2-876f-df1700fe33b0","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T20:23:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f9411ee8-f170-4226-b774-1277bf72234b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:57424","PortSpecifier":{"PortValue":57424}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f9411ee8-f170-4226-b774-1277bf72234b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-76db83.apps.f432e014-de42-4e5c-8c87-f51ff4616134.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T20:23:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f9411ee8-f170-4226-b774-1277bf72234b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:57424","PortSpecifier":{"PortValue":57424}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784060606,"nanos":248611260},"http":{"id":"f9411ee8-f170-4226-b774-1277bf72234b","method":"POST","headers":{":authority":"e2e-shared-a-76db83.apps.f432e014-de42-4e5c-8c87-f51ff4616134.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T20:23:26Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f9411ee8-f170-4226-b774-1277bf72234b","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T20:23:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f9411ee8-f170-4226-b774-1277bf72234b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"49ca3997-2250-49c1-a4df-f91ee4d9d217","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=10e4cf38-4c6b-49fd-94e4-421e73bde9fc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f51ff4616134"]}} {"level":"debug","ts":"2026-07-14T20:23:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f9411ee8-f170-4226-b774-1277bf72234b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f51ff4616134"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=10e4cf38-4c6b-49fd-94e4-421e73bde9fc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"49ca3997-2250-49c1-a4df-f91ee4d9d217","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4fef5f539b37e4ed510c125799947d892a376acd90ebba131ba48acc58ad39f1"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-76db83.apps.f432e014-de42-4e5c-8c87-f51ff4616134.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T20:23:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f9411ee8-f170-4226-b774-1277bf72234b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T20:23:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f9411ee8-f170-4226-b774-1277bf72234b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T20:23:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f9411ee8-f170-4226-b774-1277bf72234b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-76db83/auth-test-model-76db83\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-76db83/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T20:23:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f9411ee8-f170-4226-b774-1277bf72234b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T20:23:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f9411ee8-f170-4226-b774-1277bf72234b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T20:23:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f9411ee8-f170-4226-b774-1277bf72234b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-14T20:23:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f9411ee8-f170-4226-b774-1277bf72234b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T20:23:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f9411ee8-f170-4226-b774-1277bf72234b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T20:23:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b68be0c4-f5a3-4a84-b073-cff641d10087","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:49084","PortSpecifier":{"PortValue":49084}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b68be0c4-f5a3-4a84-b073-cff641d10087","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-ecc78d.apps.f432e014-de42-4e5c-8c87-f51ff4616134.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T20:23:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b68be0c4-f5a3-4a84-b073-cff641d10087","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:49084","PortSpecifier":{"PortValue":49084}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784060606,"nanos":284562830},"http":{"id":"b68be0c4-f5a3-4a84-b073-cff641d10087","method":"POST","headers":{":authority":"e2e-shared-b-ecc78d.apps.f432e014-de42-4e5c-8c87-f51ff4616134.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T20:23:26Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b68be0c4-f5a3-4a84-b073-cff641d10087","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T20:23:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b68be0c4-f5a3-4a84-b073-cff641d10087","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"49ca3997-2250-49c1-a4df-f91ee4d9d217","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=10e4cf38-4c6b-49fd-94e4-421e73bde9fc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f51ff4616134"]}} {"level":"debug","ts":"2026-07-14T20:23:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b68be0c4-f5a3-4a84-b073-cff641d10087","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f51ff4616134"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=10e4cf38-4c6b-49fd-94e4-421e73bde9fc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"49ca3997-2250-49c1-a4df-f91ee4d9d217","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"850c6f9b19f2e6867c79d7d9d65046a38257222772e1ba471177620d907bc3db"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-ecc78d.apps.f432e014-de42-4e5c-8c87-f51ff4616134.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T20:23:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b68be0c4-f5a3-4a84-b073-cff641d10087","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T20:23:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b68be0c4-f5a3-4a84-b073-cff641d10087","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T20:23:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b68be0c4-f5a3-4a84-b073-cff641d10087","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ecc78d/auth-test-model-ecc78d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-ecc78d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T20:23:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b68be0c4-f5a3-4a84-b073-cff641d10087","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T20:23:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b68be0c4-f5a3-4a84-b073-cff641d10087","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T20:23:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b68be0c4-f5a3-4a84-b073-cff641d10087","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T20:23:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b68be0c4-f5a3-4a84-b073-cff641d10087","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T20:23:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b68be0c4-f5a3-4a84-b073-cff641d10087","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T20:23:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d49b2ff2-09a6-4d84-a896-20ad2fe1b33b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:49094","PortSpecifier":{"PortValue":49094}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d49b2ff2-09a6-4d84-a896-20ad2fe1b33b","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-ecc78d.apps.f432e014-de42-4e5c-8c87-f51ff4616134.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T20:23:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d49b2ff2-09a6-4d84-a896-20ad2fe1b33b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:49094","PortSpecifier":{"PortValue":49094}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784060606,"nanos":323405502},"http":{"id":"d49b2ff2-09a6-4d84-a896-20ad2fe1b33b","method":"GET","headers":{":authority":"e2e-shared-b-ecc78d.apps.f432e014-de42-4e5c-8c87-f51ff4616134.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T20:23:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d49b2ff2-09a6-4d84-a896-20ad2fe1b33b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-cFR8JrwafO2HJlK7_wgm4rHcIqlZWuJNA62NFHGH5LWHAeu487FPYdVgCqp9"} {"level":"debug","ts":"2026-07-14T20:23:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d49b2ff2-09a6-4d84-a896-20ad2fe1b33b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-ecc78d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-cFR8JrwafO2HJlK7_wgm4rHcIqlZWuJNA62NFHGH5LWHAeu487FPYdVgCqp9\"}"} {"level":"debug","ts":"2026-07-14T20:23:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d49b2ff2-09a6-4d84-a896-20ad2fe1b33b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-ecc78d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}} {"level":"debug","ts":"2026-07-14T20:23:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d49b2ff2-09a6-4d84-a896-20ad2fe1b33b","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"850c6f9b19f2e6867c79d7d9d65046a38257222772e1ba471177620d907bc3db"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-ecc78d.apps.f432e014-de42-4e5c-8c87-f51ff4616134.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T20:23:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d49b2ff2-09a6-4d84-a896-20ad2fe1b33b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T20:23:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"d49b2ff2-09a6-4d84-a896-20ad2fe1b33b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"} {"level":"info","ts":"2026-07-14T20:23:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d49b2ff2-09a6-4d84-a896-20ad2fe1b33b","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}} {"level":"debug","ts":"2026-07-14T20:23:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d49b2ff2-09a6-4d84-a896-20ad2fe1b33b","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}} {"level":"info","ts":"2026-07-14T20:23:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"94bb593c-f1ea-4d85-b85b-3cc03180780d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:34620","PortSpecifier":{"PortValue":34620}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"94bb593c-f1ea-4d85-b85b-3cc03180780d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-76db83.apps.f432e014-de42-4e5c-8c87-f51ff4616134.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T20:23:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"94bb593c-f1ea-4d85-b85b-3cc03180780d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:34620","PortSpecifier":{"PortValue":34620}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784060625,"nanos":722251577},"http":{"id":"94bb593c-f1ea-4d85-b85b-3cc03180780d","method":"POST","headers":{":authority":"e2e-shared-a-76db83.apps.f432e014-de42-4e5c-8c87-f51ff4616134.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T20:23:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"94bb593c-f1ea-4d85-b85b-3cc03180780d","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T20:23:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"94bb593c-f1ea-4d85-b85b-3cc03180780d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"49ca3997-2250-49c1-a4df-f91ee4d9d217","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=10e4cf38-4c6b-49fd-94e4-421e73bde9fc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f51ff4616134"]}} {"level":"debug","ts":"2026-07-14T20:23:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"94bb593c-f1ea-4d85-b85b-3cc03180780d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f51ff4616134"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=10e4cf38-4c6b-49fd-94e4-421e73bde9fc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"49ca3997-2250-49c1-a4df-f91ee4d9d217","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4fef5f539b37e4ed510c125799947d892a376acd90ebba131ba48acc58ad39f1"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-76db83.apps.f432e014-de42-4e5c-8c87-f51ff4616134.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T20:23:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"94bb593c-f1ea-4d85-b85b-3cc03180780d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T20:23:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"94bb593c-f1ea-4d85-b85b-3cc03180780d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T20:23:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"94bb593c-f1ea-4d85-b85b-3cc03180780d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-76db83/auth-test-model-76db83\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-76db83/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T20:23:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"94bb593c-f1ea-4d85-b85b-3cc03180780d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T20:23:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"94bb593c-f1ea-4d85-b85b-3cc03180780d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T20:23:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"94bb593c-f1ea-4d85-b85b-3cc03180780d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T20:23:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"94bb593c-f1ea-4d85-b85b-3cc03180780d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T20:23:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"94bb593c-f1ea-4d85-b85b-3cc03180780d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T20:23:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5b2a3f5d-78b7-44ea-b20c-daf67a94ef95","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:54384","PortSpecifier":{"PortValue":54384}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5b2a3f5d-78b7-44ea-b20c-daf67a94ef95","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-ecc78d.apps.f432e014-de42-4e5c-8c87-f51ff4616134.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T20:23:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5b2a3f5d-78b7-44ea-b20c-daf67a94ef95","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:54384","PortSpecifier":{"PortValue":54384}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784060625,"nanos":758770719},"http":{"id":"5b2a3f5d-78b7-44ea-b20c-daf67a94ef95","method":"POST","headers":{":authority":"e2e-shared-b-ecc78d.apps.f432e014-de42-4e5c-8c87-f51ff4616134.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T20:23:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5b2a3f5d-78b7-44ea-b20c-daf67a94ef95","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T20:23:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5b2a3f5d-78b7-44ea-b20c-daf67a94ef95","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"49ca3997-2250-49c1-a4df-f91ee4d9d217","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=10e4cf38-4c6b-49fd-94e4-421e73bde9fc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f51ff4616134"]}} {"level":"debug","ts":"2026-07-14T20:23:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5b2a3f5d-78b7-44ea-b20c-daf67a94ef95","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f51ff4616134"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=10e4cf38-4c6b-49fd-94e4-421e73bde9fc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"49ca3997-2250-49c1-a4df-f91ee4d9d217","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"850c6f9b19f2e6867c79d7d9d65046a38257222772e1ba471177620d907bc3db"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-ecc78d.apps.f432e014-de42-4e5c-8c87-f51ff4616134.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T20:23:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5b2a3f5d-78b7-44ea-b20c-daf67a94ef95","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T20:23:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5b2a3f5d-78b7-44ea-b20c-daf67a94ef95","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T20:23:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5b2a3f5d-78b7-44ea-b20c-daf67a94ef95","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ecc78d/auth-test-model-ecc78d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-ecc78d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T20:23:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5b2a3f5d-78b7-44ea-b20c-daf67a94ef95","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T20:23:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5b2a3f5d-78b7-44ea-b20c-daf67a94ef95","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T20:23:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5b2a3f5d-78b7-44ea-b20c-daf67a94ef95","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T20:23:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5b2a3f5d-78b7-44ea-b20c-daf67a94ef95","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T20:23:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5b2a3f5d-78b7-44ea-b20c-daf67a94ef95","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T20:23:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4e7da50b-9e7c-489e-9af1-1dff5b38adb2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:34632","PortSpecifier":{"PortValue":34632}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4e7da50b-9e7c-489e-9af1-1dff5b38adb2","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-76db83.apps.f432e014-de42-4e5c-8c87-f51ff4616134.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T20:23:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4e7da50b-9e7c-489e-9af1-1dff5b38adb2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:34632","PortSpecifier":{"PortValue":34632}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784060625,"nanos":800231738},"http":{"id":"4e7da50b-9e7c-489e-9af1-1dff5b38adb2","method":"POST","headers":{":authority":"e2e-shared-a-76db83.apps.f432e014-de42-4e5c-8c87-f51ff4616134.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T20:23:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4e7da50b-9e7c-489e-9af1-1dff5b38adb2","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T20:23:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4e7da50b-9e7c-489e-9af1-1dff5b38adb2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"49ca3997-2250-49c1-a4df-f91ee4d9d217","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=10e4cf38-4c6b-49fd-94e4-421e73bde9fc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f51ff4616134"]}} {"level":"debug","ts":"2026-07-14T20:23:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4e7da50b-9e7c-489e-9af1-1dff5b38adb2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f51ff4616134"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=10e4cf38-4c6b-49fd-94e4-421e73bde9fc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"49ca3997-2250-49c1-a4df-f91ee4d9d217","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4fef5f539b37e4ed510c125799947d892a376acd90ebba131ba48acc58ad39f1"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-76db83.apps.f432e014-de42-4e5c-8c87-f51ff4616134.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T20:23:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4e7da50b-9e7c-489e-9af1-1dff5b38adb2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T20:23:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4e7da50b-9e7c-489e-9af1-1dff5b38adb2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T20:23:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4e7da50b-9e7c-489e-9af1-1dff5b38adb2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-76db83/auth-test-model-76db83\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-76db83/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T20:23:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4e7da50b-9e7c-489e-9af1-1dff5b38adb2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T20:23:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4e7da50b-9e7c-489e-9af1-1dff5b38adb2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T20:23:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4e7da50b-9e7c-489e-9af1-1dff5b38adb2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-14T20:23:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4e7da50b-9e7c-489e-9af1-1dff5b38adb2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T20:23:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4e7da50b-9e7c-489e-9af1-1dff5b38adb2","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T20:23:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cddbf452-19bb-4a2a-98a6-73e7d410c1be","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:54396","PortSpecifier":{"PortValue":54396}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cddbf452-19bb-4a2a-98a6-73e7d410c1be","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-ecc78d.apps.f432e014-de42-4e5c-8c87-f51ff4616134.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T20:23:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cddbf452-19bb-4a2a-98a6-73e7d410c1be","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:54396","PortSpecifier":{"PortValue":54396}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784060625,"nanos":842203825},"http":{"id":"cddbf452-19bb-4a2a-98a6-73e7d410c1be","method":"POST","headers":{":authority":"e2e-shared-b-ecc78d.apps.f432e014-de42-4e5c-8c87-f51ff4616134.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T20:23:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"cddbf452-19bb-4a2a-98a6-73e7d410c1be","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T20:23:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cddbf452-19bb-4a2a-98a6-73e7d410c1be","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"49ca3997-2250-49c1-a4df-f91ee4d9d217","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=10e4cf38-4c6b-49fd-94e4-421e73bde9fc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f51ff4616134"]}} {"level":"debug","ts":"2026-07-14T20:23:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cddbf452-19bb-4a2a-98a6-73e7d410c1be","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f51ff4616134"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=10e4cf38-4c6b-49fd-94e4-421e73bde9fc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"49ca3997-2250-49c1-a4df-f91ee4d9d217","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"850c6f9b19f2e6867c79d7d9d65046a38257222772e1ba471177620d907bc3db"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-ecc78d.apps.f432e014-de42-4e5c-8c87-f51ff4616134.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T20:23:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cddbf452-19bb-4a2a-98a6-73e7d410c1be","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T20:23:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cddbf452-19bb-4a2a-98a6-73e7d410c1be","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T20:23:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cddbf452-19bb-4a2a-98a6-73e7d410c1be","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ecc78d/auth-test-model-ecc78d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-ecc78d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T20:23:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"cddbf452-19bb-4a2a-98a6-73e7d410c1be","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T20:23:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cddbf452-19bb-4a2a-98a6-73e7d410c1be","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T20:23:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cddbf452-19bb-4a2a-98a6-73e7d410c1be","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T20:23:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cddbf452-19bb-4a2a-98a6-73e7d410c1be","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T20:23:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cddbf452-19bb-4a2a-98a6-73e7d410c1be","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T20:24:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3c6c581e-691a-4cc1-961a-209bcc7994e0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:42608","PortSpecifier":{"PortValue":42608}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3c6c581e-691a-4cc1-961a-209bcc7994e0","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-76db83.apps.f432e014-de42-4e5c-8c87-f51ff4616134.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T20:24:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3c6c581e-691a-4cc1-961a-209bcc7994e0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:42608","PortSpecifier":{"PortValue":42608}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784060645,"nanos":209124026},"http":{"id":"3c6c581e-691a-4cc1-961a-209bcc7994e0","method":"POST","headers":{":authority":"e2e-shared-a-76db83.apps.f432e014-de42-4e5c-8c87-f51ff4616134.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T20:24:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3c6c581e-691a-4cc1-961a-209bcc7994e0","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T20:24:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3c6c581e-691a-4cc1-961a-209bcc7994e0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"49ca3997-2250-49c1-a4df-f91ee4d9d217","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=10e4cf38-4c6b-49fd-94e4-421e73bde9fc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f51ff4616134"]}} {"level":"debug","ts":"2026-07-14T20:24:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3c6c581e-691a-4cc1-961a-209bcc7994e0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f51ff4616134"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=10e4cf38-4c6b-49fd-94e4-421e73bde9fc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"49ca3997-2250-49c1-a4df-f91ee4d9d217","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4fef5f539b37e4ed510c125799947d892a376acd90ebba131ba48acc58ad39f1"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-76db83.apps.f432e014-de42-4e5c-8c87-f51ff4616134.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T20:24:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3c6c581e-691a-4cc1-961a-209bcc7994e0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T20:24:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3c6c581e-691a-4cc1-961a-209bcc7994e0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-76db83/auth-test-model-76db83\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-76db83/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T20:24:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3c6c581e-691a-4cc1-961a-209bcc7994e0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T20:24:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3c6c581e-691a-4cc1-961a-209bcc7994e0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T20:24:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3c6c581e-691a-4cc1-961a-209bcc7994e0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T20:24:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3c6c581e-691a-4cc1-961a-209bcc7994e0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T20:24:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3c6c581e-691a-4cc1-961a-209bcc7994e0","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T20:24:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3c6c581e-691a-4cc1-961a-209bcc7994e0","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T20:24:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"92f7b715-b718-403a-af62-c716e81ab013","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:47560","PortSpecifier":{"PortValue":47560}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"92f7b715-b718-403a-af62-c716e81ab013","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-ecc78d.apps.f432e014-de42-4e5c-8c87-f51ff4616134.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T20:24:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"92f7b715-b718-403a-af62-c716e81ab013","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:47560","PortSpecifier":{"PortValue":47560}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784060645,"nanos":254870014},"http":{"id":"92f7b715-b718-403a-af62-c716e81ab013","method":"POST","headers":{":authority":"e2e-shared-b-ecc78d.apps.f432e014-de42-4e5c-8c87-f51ff4616134.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T20:24:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"92f7b715-b718-403a-af62-c716e81ab013","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T20:24:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"92f7b715-b718-403a-af62-c716e81ab013","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"49ca3997-2250-49c1-a4df-f91ee4d9d217","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=10e4cf38-4c6b-49fd-94e4-421e73bde9fc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f51ff4616134"]}} {"level":"debug","ts":"2026-07-14T20:24:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"92f7b715-b718-403a-af62-c716e81ab013","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f51ff4616134"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=10e4cf38-4c6b-49fd-94e4-421e73bde9fc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"49ca3997-2250-49c1-a4df-f91ee4d9d217","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"850c6f9b19f2e6867c79d7d9d65046a38257222772e1ba471177620d907bc3db"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-ecc78d.apps.f432e014-de42-4e5c-8c87-f51ff4616134.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T20:24:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"92f7b715-b718-403a-af62-c716e81ab013","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T20:24:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"92f7b715-b718-403a-af62-c716e81ab013","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T20:24:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"92f7b715-b718-403a-af62-c716e81ab013","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ecc78d/auth-test-model-ecc78d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-ecc78d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T20:24:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"92f7b715-b718-403a-af62-c716e81ab013","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T20:24:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"92f7b715-b718-403a-af62-c716e81ab013","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T20:24:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"92f7b715-b718-403a-af62-c716e81ab013","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T20:24:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"92f7b715-b718-403a-af62-c716e81ab013","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T20:24:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"92f7b715-b718-403a-af62-c716e81ab013","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T20:24:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"83e89b90-1384-4892-9fa9-48c6f7a9fadd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:47566","PortSpecifier":{"PortValue":47566}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"83e89b90-1384-4892-9fa9-48c6f7a9fadd","method":"GET","path":"/maas-api/v1/api-keys/9b4406aa-5c04-4fce-bba2-b952f33174de","host":"e2e-shared-b-ecc78d.apps.f432e014-de42-4e5c-8c87-f51ff4616134.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T20:24:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"83e89b90-1384-4892-9fa9-48c6f7a9fadd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:47566","PortSpecifier":{"PortValue":47566}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784060645,"nanos":296748495},"http":{"id":"83e89b90-1384-4892-9fa9-48c6f7a9fadd","method":"GET","headers":{":authority":"e2e-shared-b-ecc78d.apps.f432e014-de42-4e5c-8c87-f51ff4616134.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/9b4406aa-5c04-4fce-bba2-b952f33174de",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T20:24:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"83e89b90-1384-4892-9fa9-48c6f7a9fadd","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T20:24:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"83e89b90-1384-4892-9fa9-48c6f7a9fadd","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"49ca3997-2250-49c1-a4df-f91ee4d9d217","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=10e4cf38-4c6b-49fd-94e4-421e73bde9fc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f51ff4616134"]}} {"level":"debug","ts":"2026-07-14T20:24:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"83e89b90-1384-4892-9fa9-48c6f7a9fadd","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f51ff4616134"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=10e4cf38-4c6b-49fd-94e4-421e73bde9fc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"49ca3997-2250-49c1-a4df-f91ee4d9d217","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"850c6f9b19f2e6867c79d7d9d65046a38257222772e1ba471177620d907bc3db"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-ecc78d.apps.f432e014-de42-4e5c-8c87-f51ff4616134.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/9b4406aa-5c04-4fce-bba2-b952f33174de",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T20:24:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"83e89b90-1384-4892-9fa9-48c6f7a9fadd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T20:24:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"83e89b90-1384-4892-9fa9-48c6f7a9fadd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T20:24:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"83e89b90-1384-4892-9fa9-48c6f7a9fadd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ecc78d/auth-test-model-ecc78d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-ecc78d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T20:24:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"83e89b90-1384-4892-9fa9-48c6f7a9fadd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T20:24:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"83e89b90-1384-4892-9fa9-48c6f7a9fadd","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T20:24:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"83e89b90-1384-4892-9fa9-48c6f7a9fadd","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T20:24:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"83e89b90-1384-4892-9fa9-48c6f7a9fadd","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T20:24:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"83e89b90-1384-4892-9fa9-48c6f7a9fadd","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T20:24:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"af3ae8b9-df17-4435-989f-7696b7e145cb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:49006","PortSpecifier":{"PortValue":49006}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"af3ae8b9-df17-4435-989f-7696b7e145cb","method":"GET","path":"/maas-api/v1/api-keys/9b4406aa-5c04-4fce-bba2-b952f33174de","host":"e2e-shared-a-76db83.apps.f432e014-de42-4e5c-8c87-f51ff4616134.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T20:24:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"af3ae8b9-df17-4435-989f-7696b7e145cb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:49006","PortSpecifier":{"PortValue":49006}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784060645,"nanos":334928889},"http":{"id":"af3ae8b9-df17-4435-989f-7696b7e145cb","method":"GET","headers":{":authority":"e2e-shared-a-76db83.apps.f432e014-de42-4e5c-8c87-f51ff4616134.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/9b4406aa-5c04-4fce-bba2-b952f33174de",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T20:24:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"af3ae8b9-df17-4435-989f-7696b7e145cb","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T20:24:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"af3ae8b9-df17-4435-989f-7696b7e145cb","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"49ca3997-2250-49c1-a4df-f91ee4d9d217","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=10e4cf38-4c6b-49fd-94e4-421e73bde9fc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f51ff4616134"]}} {"level":"debug","ts":"2026-07-14T20:24:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"af3ae8b9-df17-4435-989f-7696b7e145cb","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f51ff4616134"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=10e4cf38-4c6b-49fd-94e4-421e73bde9fc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"49ca3997-2250-49c1-a4df-f91ee4d9d217","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4fef5f539b37e4ed510c125799947d892a376acd90ebba131ba48acc58ad39f1"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-76db83.apps.f432e014-de42-4e5c-8c87-f51ff4616134.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/9b4406aa-5c04-4fce-bba2-b952f33174de",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T20:24:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"af3ae8b9-df17-4435-989f-7696b7e145cb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T20:24:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"af3ae8b9-df17-4435-989f-7696b7e145cb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T20:24:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"af3ae8b9-df17-4435-989f-7696b7e145cb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-76db83/auth-test-model-76db83\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-76db83/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T20:24:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"af3ae8b9-df17-4435-989f-7696b7e145cb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T20:24:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"af3ae8b9-df17-4435-989f-7696b7e145cb","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T20:24:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"af3ae8b9-df17-4435-989f-7696b7e145cb","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T20:24:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"af3ae8b9-df17-4435-989f-7696b7e145cb","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T20:24:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"af3ae8b9-df17-4435-989f-7696b7e145cb","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T20:24:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"69ec233c-ed28-47d9-b777-2c8e6a79e0e5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:53078","PortSpecifier":{"PortValue":53078}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"69ec233c-ed28-47d9-b777-2c8e6a79e0e5","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-76db83.apps.f432e014-de42-4e5c-8c87-f51ff4616134.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T20:24:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"69ec233c-ed28-47d9-b777-2c8e6a79e0e5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:53078","PortSpecifier":{"PortValue":53078}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784060664,"nanos":710439891},"http":{"id":"69ec233c-ed28-47d9-b777-2c8e6a79e0e5","method":"POST","headers":{":authority":"e2e-shared-a-76db83.apps.f432e014-de42-4e5c-8c87-f51ff4616134.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T20:24:24Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"69ec233c-ed28-47d9-b777-2c8e6a79e0e5","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T20:24:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"69ec233c-ed28-47d9-b777-2c8e6a79e0e5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"49ca3997-2250-49c1-a4df-f91ee4d9d217","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=10e4cf38-4c6b-49fd-94e4-421e73bde9fc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f51ff4616134"]}} {"level":"debug","ts":"2026-07-14T20:24:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"69ec233c-ed28-47d9-b777-2c8e6a79e0e5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f51ff4616134"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=10e4cf38-4c6b-49fd-94e4-421e73bde9fc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"49ca3997-2250-49c1-a4df-f91ee4d9d217","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4fef5f539b37e4ed510c125799947d892a376acd90ebba131ba48acc58ad39f1"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-76db83.apps.f432e014-de42-4e5c-8c87-f51ff4616134.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T20:24:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"69ec233c-ed28-47d9-b777-2c8e6a79e0e5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T20:24:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"69ec233c-ed28-47d9-b777-2c8e6a79e0e5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T20:24:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"69ec233c-ed28-47d9-b777-2c8e6a79e0e5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-76db83/auth-test-model-76db83\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-76db83/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T20:24:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"69ec233c-ed28-47d9-b777-2c8e6a79e0e5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T20:24:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"69ec233c-ed28-47d9-b777-2c8e6a79e0e5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T20:24:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"69ec233c-ed28-47d9-b777-2c8e6a79e0e5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-14T20:24:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"69ec233c-ed28-47d9-b777-2c8e6a79e0e5","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T20:24:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"69ec233c-ed28-47d9-b777-2c8e6a79e0e5","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T20:24:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5fedcf61-06b1-46b9-8559-4eae9dcf0a0c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:42626","PortSpecifier":{"PortValue":42626}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5fedcf61-06b1-46b9-8559-4eae9dcf0a0c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-ecc78d.apps.f432e014-de42-4e5c-8c87-f51ff4616134.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T20:24:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5fedcf61-06b1-46b9-8559-4eae9dcf0a0c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:42626","PortSpecifier":{"PortValue":42626}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784060664,"nanos":745116442},"http":{"id":"5fedcf61-06b1-46b9-8559-4eae9dcf0a0c","method":"POST","headers":{":authority":"e2e-shared-b-ecc78d.apps.f432e014-de42-4e5c-8c87-f51ff4616134.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T20:24:24Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5fedcf61-06b1-46b9-8559-4eae9dcf0a0c","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T20:24:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5fedcf61-06b1-46b9-8559-4eae9dcf0a0c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"49ca3997-2250-49c1-a4df-f91ee4d9d217","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=10e4cf38-4c6b-49fd-94e4-421e73bde9fc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f51ff4616134"]}} {"level":"debug","ts":"2026-07-14T20:24:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5fedcf61-06b1-46b9-8559-4eae9dcf0a0c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f51ff4616134"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=10e4cf38-4c6b-49fd-94e4-421e73bde9fc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"49ca3997-2250-49c1-a4df-f91ee4d9d217","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"850c6f9b19f2e6867c79d7d9d65046a38257222772e1ba471177620d907bc3db"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-ecc78d.apps.f432e014-de42-4e5c-8c87-f51ff4616134.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T20:24:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5fedcf61-06b1-46b9-8559-4eae9dcf0a0c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T20:24:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5fedcf61-06b1-46b9-8559-4eae9dcf0a0c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T20:24:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5fedcf61-06b1-46b9-8559-4eae9dcf0a0c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ecc78d/auth-test-model-ecc78d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-ecc78d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T20:24:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5fedcf61-06b1-46b9-8559-4eae9dcf0a0c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T20:24:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5fedcf61-06b1-46b9-8559-4eae9dcf0a0c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T20:24:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5fedcf61-06b1-46b9-8559-4eae9dcf0a0c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-14T20:24:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5fedcf61-06b1-46b9-8559-4eae9dcf0a0c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T20:24:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5fedcf61-06b1-46b9-8559-4eae9dcf0a0c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T20:24:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d5dba7e7-ca1f-460d-acd6-b9819cf55d5a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:53090","PortSpecifier":{"PortValue":53090}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d5dba7e7-ca1f-460d-acd6-b9819cf55d5a","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-76db83.apps.f432e014-de42-4e5c-8c87-f51ff4616134.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T20:24:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d5dba7e7-ca1f-460d-acd6-b9819cf55d5a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:53090","PortSpecifier":{"PortValue":53090}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784060664,"nanos":789793635},"http":{"id":"d5dba7e7-ca1f-460d-acd6-b9819cf55d5a","method":"POST","headers":{":authority":"e2e-shared-a-76db83.apps.f432e014-de42-4e5c-8c87-f51ff4616134.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T20:24:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d5dba7e7-ca1f-460d-acd6-b9819cf55d5a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1MQ2eylW22sqBIf60_y5NoFTzTSvSTslhbnsWPWZdU3WOtdMtuv5f1zlbeWSX"} {"level":"debug","ts":"2026-07-14T20:24:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d5dba7e7-ca1f-460d-acd6-b9819cf55d5a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-76db83.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1MQ2eylW22sqBIf60_y5NoFTzTSvSTslhbnsWPWZdU3WOtdMtuv5f1zlbeWSX\"}"} {"level":"debug","ts":"2026-07-14T20:24:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d5dba7e7-ca1f-460d-acd6-b9819cf55d5a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-76db83.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9d69eb9e-b3c2-4644-88db-3e233dfc73be","keyName":"e2e-auth-iso-a-01ed09","subscription":"e2e-auth-iso-53c6c5","tenant":"e2e-shared-a-76db83","userId":"9d69eb9e-b3c2-4644-88db-3e233dfc73be","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T20:24:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d5dba7e7-ca1f-460d-acd6-b9819cf55d5a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T20:24:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d5dba7e7-ca1f-460d-acd6-b9819cf55d5a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T20:24:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d5dba7e7-ca1f-460d-acd6-b9819cf55d5a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T20:24:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d5dba7e7-ca1f-460d-acd6-b9819cf55d5a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-76db83/auth-test-model-76db83\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-76db83/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T20:24:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d5dba7e7-ca1f-460d-acd6-b9819cf55d5a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-14T20:24:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d5dba7e7-ca1f-460d-acd6-b9819cf55d5a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T20:24:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d5dba7e7-ca1f-460d-acd6-b9819cf55d5a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T20:24:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d5dba7e7-ca1f-460d-acd6-b9819cf55d5a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-53c6c5"} {"level":"info","ts":"2026-07-14T20:24:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d5dba7e7-ca1f-460d-acd6-b9819cf55d5a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T20:24:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d5dba7e7-ca1f-460d-acd6-b9819cf55d5a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T20:24:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9920b494fe619816fb098d84ce195da411262605da637629e4646a8c050d2ce7"} {"level":"info","ts":"2026-07-14T20:24:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eddcddd0ed2677defcb1757e2fb3c9b14a91dd5ac432d54eb12b7305f7350477"} {"level":"info","ts":"2026-07-14T20:24:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6218b2f7be103e6c0e316cefb9d97942a57e2625847f343c7132adb85b60fe86"} {"level":"info","ts":"2026-07-14T20:24:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/430ebfe5fa1c1a855c5eea152a07f54adc6cbdd0dd541a388c2917ce904d1cc0"} {"level":"info","ts":"2026-07-14T20:24:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9bf16e53439fed9d4568f73439484e2c8839676b3f4d6635c833878d5a558589"} {"level":"info","ts":"2026-07-14T20:24:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cf6eb76066e0ac03a4fc7390acaeebc3c80ce726d10133c9cd807f8ec5ee83a5"} {"level":"info","ts":"2026-07-14T20:24:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/244ef314265de4b56be058464ab2e474e5a94e68d0cff08812b45ff543831af8"} {"level":"info","ts":"2026-07-14T20:24:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a6d548aada78dd9325ffc4c525afcf8b888503c0a79685aa5977231b2cde5431"} {"level":"info","ts":"2026-07-14T20:24:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7a9b6c05a924b20fe69951762aad5446663e86f60acb3effd3af9a88e547a710"} {"level":"info","ts":"2026-07-14T20:24:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/34ca162416bac2363210998ad42dcc01f48f1e7e6c1d52ae7eef428ffe540ec8"} {"level":"info","ts":"2026-07-14T20:24:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b639661db139c3abba4602bea92220639e0cef0234f235789e383c1a7cd6cb3c"} {"level":"info","ts":"2026-07-14T20:24:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ff165ae61ca6d895db825ec731b71546ce838d45dee4a3ac0ed7ee796df02823"} {"level":"info","ts":"2026-07-14T20:24:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4720076698bae82c79bc9a325deeeb8d8302bcbbcc920f63cc848a9797f5cbff"} {"level":"info","ts":"2026-07-14T20:24:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3c2ef6ea18b7f8318ce777b6b49de6afdb8a76f914ece68f541bb4a79355ddfd"} {"level":"info","ts":"2026-07-14T20:24:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ffc8bd6df7cf9642e92e8e2d4d23445451aa4cd9c3cb1b990dbd5a2ba1ece375"} {"level":"info","ts":"2026-07-14T20:24:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c3caee536c5f5c00081618c5a517bf946c469644453d2c0dfbc5b946c9c6477a"} {"level":"debug","ts":"2026-07-14T20:24:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"38da8c1a655da60e741ee1c0ec3b81f351967d0830900cc9fa12c0558109614c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:24:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:24:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:24:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38da8c1a655da60e741ee1c0ec3b81f351967d0830900cc9fa12c0558109614c"} {"level":"info","ts":"2026-07-14T20:24:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"38da8c1a655da60e741ee1c0ec3b81f351967d0830900cc9fa12c0558109614c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:24:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"38da8c1a655da60e741ee1c0ec3b81f351967d0830900cc9fa12c0558109614c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:24:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"38da8c1a655da60e741ee1c0ec3b81f351967d0830900cc9fa12c0558109614c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:24:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38da8c1a655da60e741ee1c0ec3b81f351967d0830900cc9fa12c0558109614c"} {"level":"debug","ts":"2026-07-14T20:24:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"38da8c1a655da60e741ee1c0ec3b81f351967d0830900cc9fa12c0558109614c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:24:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:24:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["38da8c1a655da60e741ee1c0ec3b81f351967d0830900cc9fa12c0558109614c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:24:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"38da8c1a655da60e741ee1c0ec3b81f351967d0830900cc9fa12c0558109614c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:24:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"38da8c1a655da60e741ee1c0ec3b81f351967d0830900cc9fa12c0558109614c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38da8c1a655da60e741ee1c0ec3b81f351967d0830900cc9fa12c0558109614c"} {"level":"debug","ts":"2026-07-14T20:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"216bad5dd0803c2756146ecce8d54e255285e2b6a311bbf5097dbe75795c8fe0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:24:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:24:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"216bad5dd0803c2756146ecce8d54e255285e2b6a311bbf5097dbe75795c8fe0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"216bad5dd0803c2756146ecce8d54e255285e2b6a311bbf5097dbe75795c8fe0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"216bad5dd0803c2756146ecce8d54e255285e2b6a311bbf5097dbe75795c8fe0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/216bad5dd0803c2756146ecce8d54e255285e2b6a311bbf5097dbe75795c8fe0"} {"level":"debug","ts":"2026-07-14T20:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"216bad5dd0803c2756146ecce8d54e255285e2b6a311bbf5097dbe75795c8fe0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/216bad5dd0803c2756146ecce8d54e255285e2b6a311bbf5097dbe75795c8fe0"} {"level":"debug","ts":"2026-07-14T20:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"216bad5dd0803c2756146ecce8d54e255285e2b6a311bbf5097dbe75795c8fe0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:24:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:24:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["216bad5dd0803c2756146ecce8d54e255285e2b6a311bbf5097dbe75795c8fe0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"216bad5dd0803c2756146ecce8d54e255285e2b6a311bbf5097dbe75795c8fe0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"216bad5dd0803c2756146ecce8d54e255285e2b6a311bbf5097dbe75795c8fe0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:24:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:24:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"216bad5dd0803c2756146ecce8d54e255285e2b6a311bbf5097dbe75795c8fe0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b83999a6ad47212fb6534dc94b43d3f6c46de9bc96e2bc89e6819a04a505111c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:24:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:24:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/216bad5dd0803c2756146ecce8d54e255285e2b6a311bbf5097dbe75795c8fe0"} {"level":"info","ts":"2026-07-14T20:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b83999a6ad47212fb6534dc94b43d3f6c46de9bc96e2bc89e6819a04a505111c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"216bad5dd0803c2756146ecce8d54e255285e2b6a311bbf5097dbe75795c8fe0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:24:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:24:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["216bad5dd0803c2756146ecce8d54e255285e2b6a311bbf5097dbe75795c8fe0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b83999a6ad47212fb6534dc94b43d3f6c46de9bc96e2bc89e6819a04a505111c"} {"level":"info","ts":"2026-07-14T20:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"216bad5dd0803c2756146ecce8d54e255285e2b6a311bbf5097dbe75795c8fe0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b83999a6ad47212fb6534dc94b43d3f6c46de9bc96e2bc89e6819a04a505111c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:24:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:24:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b83999a6ad47212fb6534dc94b43d3f6c46de9bc96e2bc89e6819a04a505111c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b83999a6ad47212fb6534dc94b43d3f6c46de9bc96e2bc89e6819a04a505111c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"216bad5dd0803c2756146ecce8d54e255285e2b6a311bbf5097dbe75795c8fe0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:24:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:24:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/216bad5dd0803c2756146ecce8d54e255285e2b6a311bbf5097dbe75795c8fe0"} {"level":"info","ts":"2026-07-14T20:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"216bad5dd0803c2756146ecce8d54e255285e2b6a311bbf5097dbe75795c8fe0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b83999a6ad47212fb6534dc94b43d3f6c46de9bc96e2bc89e6819a04a505111c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:24:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:24:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b83999a6ad47212fb6534dc94b43d3f6c46de9bc96e2bc89e6819a04a505111c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"216bad5dd0803c2756146ecce8d54e255285e2b6a311bbf5097dbe75795c8fe0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:24:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:24:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["216bad5dd0803c2756146ecce8d54e255285e2b6a311bbf5097dbe75795c8fe0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b83999a6ad47212fb6534dc94b43d3f6c46de9bc96e2bc89e6819a04a505111c"} {"level":"info","ts":"2026-07-14T20:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"216bad5dd0803c2756146ecce8d54e255285e2b6a311bbf5097dbe75795c8fe0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b83999a6ad47212fb6534dc94b43d3f6c46de9bc96e2bc89e6819a04a505111c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:24:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:24:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b83999a6ad47212fb6534dc94b43d3f6c46de9bc96e2bc89e6819a04a505111c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/216bad5dd0803c2756146ecce8d54e255285e2b6a311bbf5097dbe75795c8fe0"} {"level":"info","ts":"2026-07-14T20:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b83999a6ad47212fb6534dc94b43d3f6c46de9bc96e2bc89e6819a04a505111c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"216bad5dd0803c2756146ecce8d54e255285e2b6a311bbf5097dbe75795c8fe0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79e5aa0f4fea39312280cc400d4e96dd6f9c8d4b2256eae37c17b0e15203a468","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:24:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:24:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79e5aa0f4fea39312280cc400d4e96dd6f9c8d4b2256eae37c17b0e15203a468","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b83999a6ad47212fb6534dc94b43d3f6c46de9bc96e2bc89e6819a04a505111c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:24:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:24:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b83999a6ad47212fb6534dc94b43d3f6c46de9bc96e2bc89e6819a04a505111c"} {"level":"info","ts":"2026-07-14T20:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b83999a6ad47212fb6534dc94b43d3f6c46de9bc96e2bc89e6819a04a505111c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48101b477e93b8fd83f1fb7934899d91112f5df1bebc58d0a00411c873843e58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:24:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:24:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/216bad5dd0803c2756146ecce8d54e255285e2b6a311bbf5097dbe75795c8fe0"} {"level":"info","ts":"2026-07-14T20:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48101b477e93b8fd83f1fb7934899d91112f5df1bebc58d0a00411c873843e58","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79e5aa0f4fea39312280cc400d4e96dd6f9c8d4b2256eae37c17b0e15203a468","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:24:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:24:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79e5aa0f4fea39312280cc400d4e96dd6f9c8d4b2256eae37c17b0e15203a468","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b83999a6ad47212fb6534dc94b43d3f6c46de9bc96e2bc89e6819a04a505111c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:24:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:24:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b83999a6ad47212fb6534dc94b43d3f6c46de9bc96e2bc89e6819a04a505111c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79e5aa0f4fea39312280cc400d4e96dd6f9c8d4b2256eae37c17b0e15203a468"} {"level":"info","ts":"2026-07-14T20:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b83999a6ad47212fb6534dc94b43d3f6c46de9bc96e2bc89e6819a04a505111c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48101b477e93b8fd83f1fb7934899d91112f5df1bebc58d0a00411c873843e58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:24:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:24:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48101b477e93b8fd83f1fb7934899d91112f5df1bebc58d0a00411c873843e58"} {"level":"info","ts":"2026-07-14T20:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48101b477e93b8fd83f1fb7934899d91112f5df1bebc58d0a00411c873843e58","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79e5aa0f4fea39312280cc400d4e96dd6f9c8d4b2256eae37c17b0e15203a468","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:24:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:24:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["79e5aa0f4fea39312280cc400d4e96dd6f9c8d4b2256eae37c17b0e15203a468"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79e5aa0f4fea39312280cc400d4e96dd6f9c8d4b2256eae37c17b0e15203a468","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b83999a6ad47212fb6534dc94b43d3f6c46de9bc96e2bc89e6819a04a505111c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:24:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:24:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b83999a6ad47212fb6534dc94b43d3f6c46de9bc96e2bc89e6819a04a505111c"} {"level":"info","ts":"2026-07-14T20:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b83999a6ad47212fb6534dc94b43d3f6c46de9bc96e2bc89e6819a04a505111c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48101b477e93b8fd83f1fb7934899d91112f5df1bebc58d0a00411c873843e58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:24:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:24:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["48101b477e93b8fd83f1fb7934899d91112f5df1bebc58d0a00411c873843e58"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79e5aa0f4fea39312280cc400d4e96dd6f9c8d4b2256eae37c17b0e15203a468"} {"level":"info","ts":"2026-07-14T20:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48101b477e93b8fd83f1fb7934899d91112f5df1bebc58d0a00411c873843e58","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20615bff130e778e8edbd19f276fe6c07f4e3b80fe146d7eb35bb5862c36b968","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:24:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:24:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48101b477e93b8fd83f1fb7934899d91112f5df1bebc58d0a00411c873843e58"} {"level":"info","ts":"2026-07-14T20:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20615bff130e778e8edbd19f276fe6c07f4e3b80fe146d7eb35bb5862c36b968","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79e5aa0f4fea39312280cc400d4e96dd6f9c8d4b2256eae37c17b0e15203a468","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b83999a6ad47212fb6534dc94b43d3f6c46de9bc96e2bc89e6819a04a505111c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:24:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:24:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b83999a6ad47212fb6534dc94b43d3f6c46de9bc96e2bc89e6819a04a505111c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b83999a6ad47212fb6534dc94b43d3f6c46de9bc96e2bc89e6819a04a505111c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48101b477e93b8fd83f1fb7934899d91112f5df1bebc58d0a00411c873843e58","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20615bff130e778e8edbd19f276fe6c07f4e3b80fe146d7eb35bb5862c36b968","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:24:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:24:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20615bff130e778e8edbd19f276fe6c07f4e3b80fe146d7eb35bb5862c36b968"} {"level":"info","ts":"2026-07-14T20:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20615bff130e778e8edbd19f276fe6c07f4e3b80fe146d7eb35bb5862c36b968","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b83999a6ad47212fb6534dc94b43d3f6c46de9bc96e2bc89e6819a04a505111c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:24:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:24:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b83999a6ad47212fb6534dc94b43d3f6c46de9bc96e2bc89e6819a04a505111c"} {"level":"info","ts":"2026-07-14T20:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b83999a6ad47212fb6534dc94b43d3f6c46de9bc96e2bc89e6819a04a505111c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20615bff130e778e8edbd19f276fe6c07f4e3b80fe146d7eb35bb5862c36b968","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:24:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:24:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["20615bff130e778e8edbd19f276fe6c07f4e3b80fe146d7eb35bb5862c36b968"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20615bff130e778e8edbd19f276fe6c07f4e3b80fe146d7eb35bb5862c36b968","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"092fd288c222062d1f43676b5b52c53400b57182994dc9fcc4c35fa132bc7aff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:24:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:24:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79e5aa0f4fea39312280cc400d4e96dd6f9c8d4b2256eae37c17b0e15203a468"} {"level":"info","ts":"2026-07-14T20:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"092fd288c222062d1f43676b5b52c53400b57182994dc9fcc4c35fa132bc7aff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b83999a6ad47212fb6534dc94b43d3f6c46de9bc96e2bc89e6819a04a505111c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:24:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:24:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b83999a6ad47212fb6534dc94b43d3f6c46de9bc96e2bc89e6819a04a505111c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48101b477e93b8fd83f1fb7934899d91112f5df1bebc58d0a00411c873843e58"} {"level":"info","ts":"2026-07-14T20:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b83999a6ad47212fb6534dc94b43d3f6c46de9bc96e2bc89e6819a04a505111c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20615bff130e778e8edbd19f276fe6c07f4e3b80fe146d7eb35bb5862c36b968","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:24:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:24:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20615bff130e778e8edbd19f276fe6c07f4e3b80fe146d7eb35bb5862c36b968"} {"level":"info","ts":"2026-07-14T20:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20615bff130e778e8edbd19f276fe6c07f4e3b80fe146d7eb35bb5862c36b968","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"092fd288c222062d1f43676b5b52c53400b57182994dc9fcc4c35fa132bc7aff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:24:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:24:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"092fd288c222062d1f43676b5b52c53400b57182994dc9fcc4c35fa132bc7aff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b83999a6ad47212fb6534dc94b43d3f6c46de9bc96e2bc89e6819a04a505111c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20615bff130e778e8edbd19f276fe6c07f4e3b80fe146d7eb35bb5862c36b968","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:24:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:24:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["20615bff130e778e8edbd19f276fe6c07f4e3b80fe146d7eb35bb5862c36b968"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/092fd288c222062d1f43676b5b52c53400b57182994dc9fcc4c35fa132bc7aff"} {"level":"info","ts":"2026-07-14T20:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20615bff130e778e8edbd19f276fe6c07f4e3b80fe146d7eb35bb5862c36b968","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"092fd288c222062d1f43676b5b52c53400b57182994dc9fcc4c35fa132bc7aff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:24:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:24:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["092fd288c222062d1f43676b5b52c53400b57182994dc9fcc4c35fa132bc7aff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b83999a6ad47212fb6534dc94b43d3f6c46de9bc96e2bc89e6819a04a505111c"} {"level":"info","ts":"2026-07-14T20:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"092fd288c222062d1f43676b5b52c53400b57182994dc9fcc4c35fa132bc7aff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20615bff130e778e8edbd19f276fe6c07f4e3b80fe146d7eb35bb5862c36b968","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:24:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:24:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20615bff130e778e8edbd19f276fe6c07f4e3b80fe146d7eb35bb5862c36b968","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"092fd288c222062d1f43676b5b52c53400b57182994dc9fcc4c35fa132bc7aff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"20615bff130e778e8edbd19f276fe6c07f4e3b80fe146d7eb35bb5862c36b968","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20615bff130e778e8edbd19f276fe6c07f4e3b80fe146d7eb35bb5862c36b968"} {"level":"debug","ts":"2026-07-14T20:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20615bff130e778e8edbd19f276fe6c07f4e3b80fe146d7eb35bb5862c36b968","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:24:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:24:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["20615bff130e778e8edbd19f276fe6c07f4e3b80fe146d7eb35bb5862c36b968"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20615bff130e778e8edbd19f276fe6c07f4e3b80fe146d7eb35bb5862c36b968","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"20615bff130e778e8edbd19f276fe6c07f4e3b80fe146d7eb35bb5862c36b968","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/092fd288c222062d1f43676b5b52c53400b57182994dc9fcc4c35fa132bc7aff"} {"level":"info","ts":"2026-07-14T20:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20615bff130e778e8edbd19f276fe6c07f4e3b80fe146d7eb35bb5862c36b968"} {"level":"debug","ts":"2026-07-14T20:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62758871bee31fc74865a5eca79ed3679ded465df554b2d6716397b3489ece27","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:24:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:24:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62758871bee31fc74865a5eca79ed3679ded465df554b2d6716397b3489ece27","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62758871bee31fc74865a5eca79ed3679ded465df554b2d6716397b3489ece27","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62758871bee31fc74865a5eca79ed3679ded465df554b2d6716397b3489ece27","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62758871bee31fc74865a5eca79ed3679ded465df554b2d6716397b3489ece27"} {"level":"debug","ts":"2026-07-14T20:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62758871bee31fc74865a5eca79ed3679ded465df554b2d6716397b3489ece27","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62758871bee31fc74865a5eca79ed3679ded465df554b2d6716397b3489ece27"} {"level":"debug","ts":"2026-07-14T20:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62758871bee31fc74865a5eca79ed3679ded465df554b2d6716397b3489ece27","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:24:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:24:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["62758871bee31fc74865a5eca79ed3679ded465df554b2d6716397b3489ece27"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62758871bee31fc74865a5eca79ed3679ded465df554b2d6716397b3489ece27","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62758871bee31fc74865a5eca79ed3679ded465df554b2d6716397b3489ece27","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:24:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:24:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62758871bee31fc74865a5eca79ed3679ded465df554b2d6716397b3489ece27","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62758871bee31fc74865a5eca79ed3679ded465df554b2d6716397b3489ece27","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62758871bee31fc74865a5eca79ed3679ded465df554b2d6716397b3489ece27","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62758871bee31fc74865a5eca79ed3679ded465df554b2d6716397b3489ece27"} {"level":"debug","ts":"2026-07-14T20:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62758871bee31fc74865a5eca79ed3679ded465df554b2d6716397b3489ece27","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62758871bee31fc74865a5eca79ed3679ded465df554b2d6716397b3489ece27"} {"level":"debug","ts":"2026-07-14T20:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62758871bee31fc74865a5eca79ed3679ded465df554b2d6716397b3489ece27","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:24:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:24:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["62758871bee31fc74865a5eca79ed3679ded465df554b2d6716397b3489ece27"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62758871bee31fc74865a5eca79ed3679ded465df554b2d6716397b3489ece27","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62758871bee31fc74865a5eca79ed3679ded465df554b2d6716397b3489ece27","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:24:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:24:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62758871bee31fc74865a5eca79ed3679ded465df554b2d6716397b3489ece27","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62758871bee31fc74865a5eca79ed3679ded465df554b2d6716397b3489ece27","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62758871bee31fc74865a5eca79ed3679ded465df554b2d6716397b3489ece27","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62758871bee31fc74865a5eca79ed3679ded465df554b2d6716397b3489ece27"} {"level":"debug","ts":"2026-07-14T20:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62758871bee31fc74865a5eca79ed3679ded465df554b2d6716397b3489ece27","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62758871bee31fc74865a5eca79ed3679ded465df554b2d6716397b3489ece27"} {"level":"debug","ts":"2026-07-14T20:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62758871bee31fc74865a5eca79ed3679ded465df554b2d6716397b3489ece27","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:24:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:24:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["62758871bee31fc74865a5eca79ed3679ded465df554b2d6716397b3489ece27"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62758871bee31fc74865a5eca79ed3679ded465df554b2d6716397b3489ece27","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62758871bee31fc74865a5eca79ed3679ded465df554b2d6716397b3489ece27","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:24:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:24:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62758871bee31fc74865a5eca79ed3679ded465df554b2d6716397b3489ece27","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62758871bee31fc74865a5eca79ed3679ded465df554b2d6716397b3489ece27","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62758871bee31fc74865a5eca79ed3679ded465df554b2d6716397b3489ece27","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62758871bee31fc74865a5eca79ed3679ded465df554b2d6716397b3489ece27"} {"level":"info","ts":"2026-07-14T20:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62758871bee31fc74865a5eca79ed3679ded465df554b2d6716397b3489ece27"} {"level":"debug","ts":"2026-07-14T20:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62758871bee31fc74865a5eca79ed3679ded465df554b2d6716397b3489ece27","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:24:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:24:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["62758871bee31fc74865a5eca79ed3679ded465df554b2d6716397b3489ece27"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62758871bee31fc74865a5eca79ed3679ded465df554b2d6716397b3489ece27","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62758871bee31fc74865a5eca79ed3679ded465df554b2d6716397b3489ece27","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:24:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:24:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62758871bee31fc74865a5eca79ed3679ded465df554b2d6716397b3489ece27","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62758871bee31fc74865a5eca79ed3679ded465df554b2d6716397b3489ece27","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62758871bee31fc74865a5eca79ed3679ded465df554b2d6716397b3489ece27","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62758871bee31fc74865a5eca79ed3679ded465df554b2d6716397b3489ece27","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62758871bee31fc74865a5eca79ed3679ded465df554b2d6716397b3489ece27"} {"level":"info","ts":"2026-07-14T20:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62758871bee31fc74865a5eca79ed3679ded465df554b2d6716397b3489ece27"} {"level":"debug","ts":"2026-07-14T20:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62758871bee31fc74865a5eca79ed3679ded465df554b2d6716397b3489ece27","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:24:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:24:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["62758871bee31fc74865a5eca79ed3679ded465df554b2d6716397b3489ece27"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62758871bee31fc74865a5eca79ed3679ded465df554b2d6716397b3489ece27","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62758871bee31fc74865a5eca79ed3679ded465df554b2d6716397b3489ece27","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62758871bee31fc74865a5eca79ed3679ded465df554b2d6716397b3489ece27"} {"level":"debug","ts":"2026-07-14T20:25:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3fb19fa23ea81515d14190366f5b7df18eb223dfcca52bf2ba991d4c51f0337","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:25:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:25:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:25:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3fb19fa23ea81515d14190366f5b7df18eb223dfcca52bf2ba991d4c51f0337","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:25:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3fb19fa23ea81515d14190366f5b7df18eb223dfcca52bf2ba991d4c51f0337","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:25:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3fb19fa23ea81515d14190366f5b7df18eb223dfcca52bf2ba991d4c51f0337"} {"level":"debug","ts":"2026-07-14T20:25:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3fb19fa23ea81515d14190366f5b7df18eb223dfcca52bf2ba991d4c51f0337","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:25:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3fb19fa23ea81515d14190366f5b7df18eb223dfcca52bf2ba991d4c51f0337"} {"level":"debug","ts":"2026-07-14T20:25:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3fb19fa23ea81515d14190366f5b7df18eb223dfcca52bf2ba991d4c51f0337","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:25:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:25:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f3fb19fa23ea81515d14190366f5b7df18eb223dfcca52bf2ba991d4c51f0337"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:25:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3fb19fa23ea81515d14190366f5b7df18eb223dfcca52bf2ba991d4c51f0337","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:25:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3fb19fa23ea81515d14190366f5b7df18eb223dfcca52bf2ba991d4c51f0337","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:25:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:25:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:25:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3fb19fa23ea81515d14190366f5b7df18eb223dfcca52bf2ba991d4c51f0337","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:25:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3fb19fa23ea81515d14190366f5b7df18eb223dfcca52bf2ba991d4c51f0337","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:25:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3fb19fa23ea81515d14190366f5b7df18eb223dfcca52bf2ba991d4c51f0337","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:25:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3fb19fa23ea81515d14190366f5b7df18eb223dfcca52bf2ba991d4c51f0337"} {"level":"debug","ts":"2026-07-14T20:25:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3fb19fa23ea81515d14190366f5b7df18eb223dfcca52bf2ba991d4c51f0337","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:25:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3fb19fa23ea81515d14190366f5b7df18eb223dfcca52bf2ba991d4c51f0337"} {"level":"debug","ts":"2026-07-14T20:25:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3fb19fa23ea81515d14190366f5b7df18eb223dfcca52bf2ba991d4c51f0337","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:25:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:25:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f3fb19fa23ea81515d14190366f5b7df18eb223dfcca52bf2ba991d4c51f0337"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:25:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3fb19fa23ea81515d14190366f5b7df18eb223dfcca52bf2ba991d4c51f0337","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:25:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3fb19fa23ea81515d14190366f5b7df18eb223dfcca52bf2ba991d4c51f0337","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:25:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3fb19fa23ea81515d14190366f5b7df18eb223dfcca52bf2ba991d4c51f0337"} {"level":"debug","ts":"2026-07-14T20:25:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44f166e545e921150c43a6f5609dea4ba423cbe2d0b2580cd23f3d14a466179d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:25:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:25:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:25:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44f166e545e921150c43a6f5609dea4ba423cbe2d0b2580cd23f3d14a466179d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:25:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae9208b5eed0c1e9d0084aac6964f7590ac60cea2fe66685f46f2be4e7626cfa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:25:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:25:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:25:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44f166e545e921150c43a6f5609dea4ba423cbe2d0b2580cd23f3d14a466179d"} {"level":"info","ts":"2026-07-14T20:25:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae9208b5eed0c1e9d0084aac6964f7590ac60cea2fe66685f46f2be4e7626cfa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:25:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44f166e545e921150c43a6f5609dea4ba423cbe2d0b2580cd23f3d14a466179d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:25:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:25:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["44f166e545e921150c43a6f5609dea4ba423cbe2d0b2580cd23f3d14a466179d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:25:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae9208b5eed0c1e9d0084aac6964f7590ac60cea2fe66685f46f2be4e7626cfa"} {"level":"info","ts":"2026-07-14T20:25:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44f166e545e921150c43a6f5609dea4ba423cbe2d0b2580cd23f3d14a466179d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:25:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae9208b5eed0c1e9d0084aac6964f7590ac60cea2fe66685f46f2be4e7626cfa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:25:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:25:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ae9208b5eed0c1e9d0084aac6964f7590ac60cea2fe66685f46f2be4e7626cfa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:25:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae9208b5eed0c1e9d0084aac6964f7590ac60cea2fe66685f46f2be4e7626cfa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:25:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44f166e545e921150c43a6f5609dea4ba423cbe2d0b2580cd23f3d14a466179d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:25:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:25:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:25:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44f166e545e921150c43a6f5609dea4ba423cbe2d0b2580cd23f3d14a466179d"} {"level":"info","ts":"2026-07-14T20:25:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44f166e545e921150c43a6f5609dea4ba423cbe2d0b2580cd23f3d14a466179d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:25:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae9208b5eed0c1e9d0084aac6964f7590ac60cea2fe66685f46f2be4e7626cfa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:25:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:25:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:25:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae9208b5eed0c1e9d0084aac6964f7590ac60cea2fe66685f46f2be4e7626cfa"} {"level":"info","ts":"2026-07-14T20:25:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae9208b5eed0c1e9d0084aac6964f7590ac60cea2fe66685f46f2be4e7626cfa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:25:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"44f166e545e921150c43a6f5609dea4ba423cbe2d0b2580cd23f3d14a466179d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:25:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae9208b5eed0c1e9d0084aac6964f7590ac60cea2fe66685f46f2be4e7626cfa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:25:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:25:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ae9208b5eed0c1e9d0084aac6964f7590ac60cea2fe66685f46f2be4e7626cfa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:25:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae9208b5eed0c1e9d0084aac6964f7590ac60cea2fe66685f46f2be4e7626cfa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:25:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"44f166e545e921150c43a6f5609dea4ba423cbe2d0b2580cd23f3d14a466179d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:25:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae9208b5eed0c1e9d0084aac6964f7590ac60cea2fe66685f46f2be4e7626cfa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:25:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:25:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ae9208b5eed0c1e9d0084aac6964f7590ac60cea2fe66685f46f2be4e7626cfa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:25:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44f166e545e921150c43a6f5609dea4ba423cbe2d0b2580cd23f3d14a466179d"} {"level":"error","ts":"2026-07-14T20:25:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ae9208b5eed0c1e9d0084aac6964f7590ac60cea2fe66685f46f2be4e7626cfa","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ae9208b5eed0c1e9d0084aac6964f7590ac60cea2fe66685f46f2be4e7626cfa\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T20:25:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73bdc7cb45970cf3e3b97a60476a5727db12be56c041d9832325801db4cc16bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:25:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:25:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:25:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73bdc7cb45970cf3e3b97a60476a5727db12be56c041d9832325801db4cc16bc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:25:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae9208b5eed0c1e9d0084aac6964f7590ac60cea2fe66685f46f2be4e7626cfa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:25:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:25:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:25:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae9208b5eed0c1e9d0084aac6964f7590ac60cea2fe66685f46f2be4e7626cfa"} {"level":"info","ts":"2026-07-14T20:25:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae9208b5eed0c1e9d0084aac6964f7590ac60cea2fe66685f46f2be4e7626cfa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:25:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3aa9d0b533ad8c60f1c33d005364f848edeb9f798c416c1d4a07eb85e5d96a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:25:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:25:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:25:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73bdc7cb45970cf3e3b97a60476a5727db12be56c041d9832325801db4cc16bc"} {"level":"info","ts":"2026-07-14T20:25:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3aa9d0b533ad8c60f1c33d005364f848edeb9f798c416c1d4a07eb85e5d96a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:25:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44f166e545e921150c43a6f5609dea4ba423cbe2d0b2580cd23f3d14a466179d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:25:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:25:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["44f166e545e921150c43a6f5609dea4ba423cbe2d0b2580cd23f3d14a466179d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:25:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44f166e545e921150c43a6f5609dea4ba423cbe2d0b2580cd23f3d14a466179d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:25:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73bdc7cb45970cf3e3b97a60476a5727db12be56c041d9832325801db4cc16bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:25:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:25:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["73bdc7cb45970cf3e3b97a60476a5727db12be56c041d9832325801db4cc16bc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:25:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3aa9d0b533ad8c60f1c33d005364f848edeb9f798c416c1d4a07eb85e5d96a3"} {"level":"info","ts":"2026-07-14T20:25:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73bdc7cb45970cf3e3b97a60476a5727db12be56c041d9832325801db4cc16bc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:25:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae9208b5eed0c1e9d0084aac6964f7590ac60cea2fe66685f46f2be4e7626cfa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:25:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3aa9d0b533ad8c60f1c33d005364f848edeb9f798c416c1d4a07eb85e5d96a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:25:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:25:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f3aa9d0b533ad8c60f1c33d005364f848edeb9f798c416c1d4a07eb85e5d96a3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:25:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae9208b5eed0c1e9d0084aac6964f7590ac60cea2fe66685f46f2be4e7626cfa"} {"level":"info","ts":"2026-07-14T20:25:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3aa9d0b533ad8c60f1c33d005364f848edeb9f798c416c1d4a07eb85e5d96a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:25:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44f166e545e921150c43a6f5609dea4ba423cbe2d0b2580cd23f3d14a466179d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:25:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:25:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:25:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44f166e545e921150c43a6f5609dea4ba423cbe2d0b2580cd23f3d14a466179d"} {"level":"info","ts":"2026-07-14T20:25:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44f166e545e921150c43a6f5609dea4ba423cbe2d0b2580cd23f3d14a466179d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:25:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"73bdc7cb45970cf3e3b97a60476a5727db12be56c041d9832325801db4cc16bc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:25:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3aa9d0b533ad8c60f1c33d005364f848edeb9f798c416c1d4a07eb85e5d96a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:25:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:25:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:25:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3aa9d0b533ad8c60f1c33d005364f848edeb9f798c416c1d4a07eb85e5d96a3"} {"level":"info","ts":"2026-07-14T20:25:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3aa9d0b533ad8c60f1c33d005364f848edeb9f798c416c1d4a07eb85e5d96a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:25:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae9208b5eed0c1e9d0084aac6964f7590ac60cea2fe66685f46f2be4e7626cfa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:25:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:25:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ae9208b5eed0c1e9d0084aac6964f7590ac60cea2fe66685f46f2be4e7626cfa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:25:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae9208b5eed0c1e9d0084aac6964f7590ac60cea2fe66685f46f2be4e7626cfa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:25:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3454c5a4dbed20c6df2426eb08ea27ecc5899e0786a959013b24927dd9284441","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:25:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:25:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:25:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73bdc7cb45970cf3e3b97a60476a5727db12be56c041d9832325801db4cc16bc"} {"level":"info","ts":"2026-07-14T20:25:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3454c5a4dbed20c6df2426eb08ea27ecc5899e0786a959013b24927dd9284441","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:25:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44f166e545e921150c43a6f5609dea4ba423cbe2d0b2580cd23f3d14a466179d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:25:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:25:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["44f166e545e921150c43a6f5609dea4ba423cbe2d0b2580cd23f3d14a466179d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:25:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3454c5a4dbed20c6df2426eb08ea27ecc5899e0786a959013b24927dd9284441"} {"level":"info","ts":"2026-07-14T20:25:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44f166e545e921150c43a6f5609dea4ba423cbe2d0b2580cd23f3d14a466179d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:25:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3aa9d0b533ad8c60f1c33d005364f848edeb9f798c416c1d4a07eb85e5d96a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:25:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:25:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f3aa9d0b533ad8c60f1c33d005364f848edeb9f798c416c1d4a07eb85e5d96a3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:25:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44f166e545e921150c43a6f5609dea4ba423cbe2d0b2580cd23f3d14a466179d"} {"level":"info","ts":"2026-07-14T20:25:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3aa9d0b533ad8c60f1c33d005364f848edeb9f798c416c1d4a07eb85e5d96a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:25:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae9208b5eed0c1e9d0084aac6964f7590ac60cea2fe66685f46f2be4e7626cfa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:25:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3454c5a4dbed20c6df2426eb08ea27ecc5899e0786a959013b24927dd9284441","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:25:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:25:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3454c5a4dbed20c6df2426eb08ea27ecc5899e0786a959013b24927dd9284441"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:25:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3454c5a4dbed20c6df2426eb08ea27ecc5899e0786a959013b24927dd9284441","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:25:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"44f166e545e921150c43a6f5609dea4ba423cbe2d0b2580cd23f3d14a466179d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:25:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3aa9d0b533ad8c60f1c33d005364f848edeb9f798c416c1d4a07eb85e5d96a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:25:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:25:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:25:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3aa9d0b533ad8c60f1c33d005364f848edeb9f798c416c1d4a07eb85e5d96a3"} {"level":"info","ts":"2026-07-14T20:25:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3aa9d0b533ad8c60f1c33d005364f848edeb9f798c416c1d4a07eb85e5d96a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:25:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3454c5a4dbed20c6df2426eb08ea27ecc5899e0786a959013b24927dd9284441","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:25:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3aa9d0b533ad8c60f1c33d005364f848edeb9f798c416c1d4a07eb85e5d96a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:25:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:25:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f3aa9d0b533ad8c60f1c33d005364f848edeb9f798c416c1d4a07eb85e5d96a3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:25:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae9208b5eed0c1e9d0084aac6964f7590ac60cea2fe66685f46f2be4e7626cfa"} {"level":"info","ts":"2026-07-14T20:25:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3aa9d0b533ad8c60f1c33d005364f848edeb9f798c416c1d4a07eb85e5d96a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:25:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3aa9d0b533ad8c60f1c33d005364f848edeb9f798c416c1d4a07eb85e5d96a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:25:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:25:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f3aa9d0b533ad8c60f1c33d005364f848edeb9f798c416c1d4a07eb85e5d96a3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-14T20:25:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f3aa9d0b533ad8c60f1c33d005364f848edeb9f798c416c1d4a07eb85e5d96a3","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f3aa9d0b533ad8c60f1c33d005364f848edeb9f798c416c1d4a07eb85e5d96a3\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T20:25:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3aa9d0b533ad8c60f1c33d005364f848edeb9f798c416c1d4a07eb85e5d96a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:25:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3aa9d0b533ad8c60f1c33d005364f848edeb9f798c416c1d4a07eb85e5d96a3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:25:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3454c5a4dbed20c6df2426eb08ea27ecc5899e0786a959013b24927dd9284441"} {"level":"info","ts":"2026-07-14T20:25:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44f166e545e921150c43a6f5609dea4ba423cbe2d0b2580cd23f3d14a466179d"} {"level":"debug","ts":"2026-07-14T20:25:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3de18ad8f4884fbba8a6e4612fdef759b83d226963e5dcfca9e8d575f2419a58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:25:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:25:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:25:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3aa9d0b533ad8c60f1c33d005364f848edeb9f798c416c1d4a07eb85e5d96a3"} {"level":"info","ts":"2026-07-14T20:25:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3de18ad8f4884fbba8a6e4612fdef759b83d226963e5dcfca9e8d575f2419a58","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:25:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3de18ad8f4884fbba8a6e4612fdef759b83d226963e5dcfca9e8d575f2419a58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:25:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:25:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:25:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3de18ad8f4884fbba8a6e4612fdef759b83d226963e5dcfca9e8d575f2419a58"} {"level":"info","ts":"2026-07-14T20:25:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3de18ad8f4884fbba8a6e4612fdef759b83d226963e5dcfca9e8d575f2419a58","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:25:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3de18ad8f4884fbba8a6e4612fdef759b83d226963e5dcfca9e8d575f2419a58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:25:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:25:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-14T20:25:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3de18ad8f4884fbba8a6e4612fdef759b83d226963e5dcfca9e8d575f2419a58","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3de18ad8f4884fbba8a6e4612fdef759b83d226963e5dcfca9e8d575f2419a58\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T20:25:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3de18ad8f4884fbba8a6e4612fdef759b83d226963e5dcfca9e8d575f2419a58","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:25:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3de18ad8f4884fbba8a6e4612fdef759b83d226963e5dcfca9e8d575f2419a58","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:25:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3de18ad8f4884fbba8a6e4612fdef759b83d226963e5dcfca9e8d575f2419a58"} {"level":"info","ts":"2026-07-14T20:25:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3de18ad8f4884fbba8a6e4612fdef759b83d226963e5dcfca9e8d575f2419a58"} {"level":"debug","ts":"2026-07-14T20:25:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6899ad2782dcb89bbb4c190af910430716042c6f62faedc962cd8505a23dc2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:25:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:25:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:25:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6899ad2782dcb89bbb4c190af910430716042c6f62faedc962cd8505a23dc2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:25:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6899ad2782dcb89bbb4c190af910430716042c6f62faedc962cd8505a23dc2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:25:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6899ad2782dcb89bbb4c190af910430716042c6f62faedc962cd8505a23dc2e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:25:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6899ad2782dcb89bbb4c190af910430716042c6f62faedc962cd8505a23dc2e"} {"level":"debug","ts":"2026-07-14T20:25:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3de18ad8f4884fbba8a6e4612fdef759b83d226963e5dcfca9e8d575f2419a58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:25:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:25:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3de18ad8f4884fbba8a6e4612fdef759b83d226963e5dcfca9e8d575f2419a58"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:25:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3de18ad8f4884fbba8a6e4612fdef759b83d226963e5dcfca9e8d575f2419a58","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:25:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6899ad2782dcb89bbb4c190af910430716042c6f62faedc962cd8505a23dc2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:25:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3de18ad8f4884fbba8a6e4612fdef759b83d226963e5dcfca9e8d575f2419a58","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:25:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6899ad2782dcb89bbb4c190af910430716042c6f62faedc962cd8505a23dc2e"} {"level":"info","ts":"2026-07-14T20:25:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3de18ad8f4884fbba8a6e4612fdef759b83d226963e5dcfca9e8d575f2419a58"} {"level":"debug","ts":"2026-07-14T20:25:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6899ad2782dcb89bbb4c190af910430716042c6f62faedc962cd8505a23dc2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:25:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:25:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c6899ad2782dcb89bbb4c190af910430716042c6f62faedc962cd8505a23dc2e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:25:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6899ad2782dcb89bbb4c190af910430716042c6f62faedc962cd8505a23dc2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:25:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6899ad2782dcb89bbb4c190af910430716042c6f62faedc962cd8505a23dc2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:25:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:25:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:25:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6899ad2782dcb89bbb4c190af910430716042c6f62faedc962cd8505a23dc2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:25:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6899ad2782dcb89bbb4c190af910430716042c6f62faedc962cd8505a23dc2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:25:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6899ad2782dcb89bbb4c190af910430716042c6f62faedc962cd8505a23dc2e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:25:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6899ad2782dcb89bbb4c190af910430716042c6f62faedc962cd8505a23dc2e"} {"level":"debug","ts":"2026-07-14T20:25:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6899ad2782dcb89bbb4c190af910430716042c6f62faedc962cd8505a23dc2e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:25:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6899ad2782dcb89bbb4c190af910430716042c6f62faedc962cd8505a23dc2e"} {"level":"debug","ts":"2026-07-14T20:25:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6899ad2782dcb89bbb4c190af910430716042c6f62faedc962cd8505a23dc2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:25:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:25:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c6899ad2782dcb89bbb4c190af910430716042c6f62faedc962cd8505a23dc2e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:25:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6899ad2782dcb89bbb4c190af910430716042c6f62faedc962cd8505a23dc2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:25:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6899ad2782dcb89bbb4c190af910430716042c6f62faedc962cd8505a23dc2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:25:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:25:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:25:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6899ad2782dcb89bbb4c190af910430716042c6f62faedc962cd8505a23dc2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:25:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6899ad2782dcb89bbb4c190af910430716042c6f62faedc962cd8505a23dc2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:25:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6899ad2782dcb89bbb4c190af910430716042c6f62faedc962cd8505a23dc2e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:25:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6899ad2782dcb89bbb4c190af910430716042c6f62faedc962cd8505a23dc2e"} {"level":"debug","ts":"2026-07-14T20:25:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6899ad2782dcb89bbb4c190af910430716042c6f62faedc962cd8505a23dc2e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:25:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6899ad2782dcb89bbb4c190af910430716042c6f62faedc962cd8505a23dc2e"} {"level":"debug","ts":"2026-07-14T20:25:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6899ad2782dcb89bbb4c190af910430716042c6f62faedc962cd8505a23dc2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:25:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:25:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c6899ad2782dcb89bbb4c190af910430716042c6f62faedc962cd8505a23dc2e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:25:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6899ad2782dcb89bbb4c190af910430716042c6f62faedc962cd8505a23dc2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:25:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6899ad2782dcb89bbb4c190af910430716042c6f62faedc962cd8505a23dc2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:25:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:25:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:25:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6899ad2782dcb89bbb4c190af910430716042c6f62faedc962cd8505a23dc2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:25:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6899ad2782dcb89bbb4c190af910430716042c6f62faedc962cd8505a23dc2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:25:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6899ad2782dcb89bbb4c190af910430716042c6f62faedc962cd8505a23dc2e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:25:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6899ad2782dcb89bbb4c190af910430716042c6f62faedc962cd8505a23dc2e"} {"level":"debug","ts":"2026-07-14T20:25:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6899ad2782dcb89bbb4c190af910430716042c6f62faedc962cd8505a23dc2e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:25:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6899ad2782dcb89bbb4c190af910430716042c6f62faedc962cd8505a23dc2e"} {"level":"debug","ts":"2026-07-14T20:25:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6899ad2782dcb89bbb4c190af910430716042c6f62faedc962cd8505a23dc2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:25:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:25:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c6899ad2782dcb89bbb4c190af910430716042c6f62faedc962cd8505a23dc2e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:25:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6899ad2782dcb89bbb4c190af910430716042c6f62faedc962cd8505a23dc2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:25:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6899ad2782dcb89bbb4c190af910430716042c6f62faedc962cd8505a23dc2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:25:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:25:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:25:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6899ad2782dcb89bbb4c190af910430716042c6f62faedc962cd8505a23dc2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:25:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6899ad2782dcb89bbb4c190af910430716042c6f62faedc962cd8505a23dc2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:25:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6899ad2782dcb89bbb4c190af910430716042c6f62faedc962cd8505a23dc2e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:25:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6899ad2782dcb89bbb4c190af910430716042c6f62faedc962cd8505a23dc2e"} {"level":"debug","ts":"2026-07-14T20:25:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6899ad2782dcb89bbb4c190af910430716042c6f62faedc962cd8505a23dc2e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:25:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6899ad2782dcb89bbb4c190af910430716042c6f62faedc962cd8505a23dc2e"} {"level":"debug","ts":"2026-07-14T20:25:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6899ad2782dcb89bbb4c190af910430716042c6f62faedc962cd8505a23dc2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:25:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:25:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c6899ad2782dcb89bbb4c190af910430716042c6f62faedc962cd8505a23dc2e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:25:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6899ad2782dcb89bbb4c190af910430716042c6f62faedc962cd8505a23dc2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:25:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6899ad2782dcb89bbb4c190af910430716042c6f62faedc962cd8505a23dc2e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:25:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6899ad2782dcb89bbb4c190af910430716042c6f62faedc962cd8505a23dc2e"} {"level":"debug","ts":"2026-07-14T20:25:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae9208b5eed0c1e9d0084aac6964f7590ac60cea2fe66685f46f2be4e7626cfa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:25:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:25:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:25:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae9208b5eed0c1e9d0084aac6964f7590ac60cea2fe66685f46f2be4e7626cfa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:25:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae9208b5eed0c1e9d0084aac6964f7590ac60cea2fe66685f46f2be4e7626cfa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:25:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae9208b5eed0c1e9d0084aac6964f7590ac60cea2fe66685f46f2be4e7626cfa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:25:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae9208b5eed0c1e9d0084aac6964f7590ac60cea2fe66685f46f2be4e7626cfa"} {"level":"debug","ts":"2026-07-14T20:25:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae9208b5eed0c1e9d0084aac6964f7590ac60cea2fe66685f46f2be4e7626cfa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:25:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae9208b5eed0c1e9d0084aac6964f7590ac60cea2fe66685f46f2be4e7626cfa"} {"level":"debug","ts":"2026-07-14T20:25:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae9208b5eed0c1e9d0084aac6964f7590ac60cea2fe66685f46f2be4e7626cfa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:25:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:25:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ae9208b5eed0c1e9d0084aac6964f7590ac60cea2fe66685f46f2be4e7626cfa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:25:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae9208b5eed0c1e9d0084aac6964f7590ac60cea2fe66685f46f2be4e7626cfa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:25:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae9208b5eed0c1e9d0084aac6964f7590ac60cea2fe66685f46f2be4e7626cfa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae9208b5eed0c1e9d0084aac6964f7590ac60cea2fe66685f46f2be4e7626cfa"} {"level":"debug","ts":"2026-07-14T20:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97590f5cd28ec35ed98f78ac959e5d16f8e7df75ca6a5d12abd046201c08d912","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:25:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:25:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97590f5cd28ec35ed98f78ac959e5d16f8e7df75ca6a5d12abd046201c08d912","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97590f5cd28ec35ed98f78ac959e5d16f8e7df75ca6a5d12abd046201c08d912","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97590f5cd28ec35ed98f78ac959e5d16f8e7df75ca6a5d12abd046201c08d912","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97590f5cd28ec35ed98f78ac959e5d16f8e7df75ca6a5d12abd046201c08d912"} {"level":"debug","ts":"2026-07-14T20:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97590f5cd28ec35ed98f78ac959e5d16f8e7df75ca6a5d12abd046201c08d912","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97590f5cd28ec35ed98f78ac959e5d16f8e7df75ca6a5d12abd046201c08d912"} {"level":"debug","ts":"2026-07-14T20:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97590f5cd28ec35ed98f78ac959e5d16f8e7df75ca6a5d12abd046201c08d912","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:25:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:25:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["97590f5cd28ec35ed98f78ac959e5d16f8e7df75ca6a5d12abd046201c08d912"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97590f5cd28ec35ed98f78ac959e5d16f8e7df75ca6a5d12abd046201c08d912","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97590f5cd28ec35ed98f78ac959e5d16f8e7df75ca6a5d12abd046201c08d912","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:25:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:25:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97590f5cd28ec35ed98f78ac959e5d16f8e7df75ca6a5d12abd046201c08d912","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3454c5a4dbed20c6df2426eb08ea27ecc5899e0786a959013b24927dd9284441","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97590f5cd28ec35ed98f78ac959e5d16f8e7df75ca6a5d12abd046201c08d912","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97590f5cd28ec35ed98f78ac959e5d16f8e7df75ca6a5d12abd046201c08d912","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97590f5cd28ec35ed98f78ac959e5d16f8e7df75ca6a5d12abd046201c08d912"} {"level":"debug","ts":"2026-07-14T20:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97590f5cd28ec35ed98f78ac959e5d16f8e7df75ca6a5d12abd046201c08d912","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:25:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:25:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["97590f5cd28ec35ed98f78ac959e5d16f8e7df75ca6a5d12abd046201c08d912"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3454c5a4dbed20c6df2426eb08ea27ecc5899e0786a959013b24927dd9284441"} {"level":"info","ts":"2026-07-14T20:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97590f5cd28ec35ed98f78ac959e5d16f8e7df75ca6a5d12abd046201c08d912","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97590f5cd28ec35ed98f78ac959e5d16f8e7df75ca6a5d12abd046201c08d912","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:25:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:25:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97590f5cd28ec35ed98f78ac959e5d16f8e7df75ca6a5d12abd046201c08d912"} {"level":"info","ts":"2026-07-14T20:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97590f5cd28ec35ed98f78ac959e5d16f8e7df75ca6a5d12abd046201c08d912","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97590f5cd28ec35ed98f78ac959e5d16f8e7df75ca6a5d12abd046201c08d912","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97590f5cd28ec35ed98f78ac959e5d16f8e7df75ca6a5d12abd046201c08d912","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97590f5cd28ec35ed98f78ac959e5d16f8e7df75ca6a5d12abd046201c08d912"} {"level":"debug","ts":"2026-07-14T20:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97590f5cd28ec35ed98f78ac959e5d16f8e7df75ca6a5d12abd046201c08d912","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97590f5cd28ec35ed98f78ac959e5d16f8e7df75ca6a5d12abd046201c08d912"} {"level":"debug","ts":"2026-07-14T20:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97590f5cd28ec35ed98f78ac959e5d16f8e7df75ca6a5d12abd046201c08d912","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:25:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:25:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["97590f5cd28ec35ed98f78ac959e5d16f8e7df75ca6a5d12abd046201c08d912"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97590f5cd28ec35ed98f78ac959e5d16f8e7df75ca6a5d12abd046201c08d912","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97590f5cd28ec35ed98f78ac959e5d16f8e7df75ca6a5d12abd046201c08d912","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97590f5cd28ec35ed98f78ac959e5d16f8e7df75ca6a5d12abd046201c08d912"} {"level":"debug","ts":"2026-07-14T20:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4fef5f539b37e4ed510c125799947d892a376acd90ebba131ba48acc58ad39f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:25:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:25:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4fef5f539b37e4ed510c125799947d892a376acd90ebba131ba48acc58ad39f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4fef5f539b37e4ed510c125799947d892a376acd90ebba131ba48acc58ad39f1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4fef5f539b37e4ed510c125799947d892a376acd90ebba131ba48acc58ad39f1"} {"level":"debug","ts":"2026-07-14T20:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4fef5f539b37e4ed510c125799947d892a376acd90ebba131ba48acc58ad39f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4fef5f539b37e4ed510c125799947d892a376acd90ebba131ba48acc58ad39f1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4fef5f539b37e4ed510c125799947d892a376acd90ebba131ba48acc58ad39f1"} {"level":"debug","ts":"2026-07-14T20:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4fef5f539b37e4ed510c125799947d892a376acd90ebba131ba48acc58ad39f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:25:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:25:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4fef5f539b37e4ed510c125799947d892a376acd90ebba131ba48acc58ad39f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4fef5f539b37e4ed510c125799947d892a376acd90ebba131ba48acc58ad39f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4fef5f539b37e4ed510c125799947d892a376acd90ebba131ba48acc58ad39f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b83999a6ad47212fb6534dc94b43d3f6c46de9bc96e2bc89e6819a04a505111c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4fef5f539b37e4ed510c125799947d892a376acd90ebba131ba48acc58ad39f1"} {"level":"info","ts":"2026-07-14T20:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b83999a6ad47212fb6534dc94b43d3f6c46de9bc96e2bc89e6819a04a505111c"} {"level":"debug","ts":"2026-07-14T20:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:25:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:25:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd"} {"level":"debug","ts":"2026-07-14T20:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd"} {"level":"debug","ts":"2026-07-14T20:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:25:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:25:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c28b37ed679c5b23f59474eb4c452cbeaa570eb67fa3779e7aac7c34b6b82c5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd"} {"level":"info","ts":"2026-07-14T20:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c28b37ed679c5b23f59474eb4c452cbeaa570eb67fa3779e7aac7c34b6b82c5"} {"level":"debug","ts":"2026-07-14T20:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6899ad2782dcb89bbb4c190af910430716042c6f62faedc962cd8505a23dc2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:25:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:25:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6899ad2782dcb89bbb4c190af910430716042c6f62faedc962cd8505a23dc2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6899ad2782dcb89bbb4c190af910430716042c6f62faedc962cd8505a23dc2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6899ad2782dcb89bbb4c190af910430716042c6f62faedc962cd8505a23dc2e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6899ad2782dcb89bbb4c190af910430716042c6f62faedc962cd8505a23dc2e"} {"level":"debug","ts":"2026-07-14T20:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6899ad2782dcb89bbb4c190af910430716042c6f62faedc962cd8505a23dc2e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6899ad2782dcb89bbb4c190af910430716042c6f62faedc962cd8505a23dc2e"} {"level":"debug","ts":"2026-07-14T20:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6899ad2782dcb89bbb4c190af910430716042c6f62faedc962cd8505a23dc2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:25:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:25:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c6899ad2782dcb89bbb4c190af910430716042c6f62faedc962cd8505a23dc2e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6899ad2782dcb89bbb4c190af910430716042c6f62faedc962cd8505a23dc2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6899ad2782dcb89bbb4c190af910430716042c6f62faedc962cd8505a23dc2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:25:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:25:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6899ad2782dcb89bbb4c190af910430716042c6f62faedc962cd8505a23dc2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6899ad2782dcb89bbb4c190af910430716042c6f62faedc962cd8505a23dc2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6899ad2782dcb89bbb4c190af910430716042c6f62faedc962cd8505a23dc2e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6899ad2782dcb89bbb4c190af910430716042c6f62faedc962cd8505a23dc2e"} {"level":"debug","ts":"2026-07-14T20:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6899ad2782dcb89bbb4c190af910430716042c6f62faedc962cd8505a23dc2e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6899ad2782dcb89bbb4c190af910430716042c6f62faedc962cd8505a23dc2e"} {"level":"debug","ts":"2026-07-14T20:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6899ad2782dcb89bbb4c190af910430716042c6f62faedc962cd8505a23dc2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:25:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:25:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c6899ad2782dcb89bbb4c190af910430716042c6f62faedc962cd8505a23dc2e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6899ad2782dcb89bbb4c190af910430716042c6f62faedc962cd8505a23dc2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6899ad2782dcb89bbb4c190af910430716042c6f62faedc962cd8505a23dc2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"73bdc7cb45970cf3e3b97a60476a5727db12be56c041d9832325801db4cc16bc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6899ad2782dcb89bbb4c190af910430716042c6f62faedc962cd8505a23dc2e"} {"level":"info","ts":"2026-07-14T20:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73bdc7cb45970cf3e3b97a60476a5727db12be56c041d9832325801db4cc16bc"} {"level":"debug","ts":"2026-07-14T20:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3aa9d0b533ad8c60f1c33d005364f848edeb9f798c416c1d4a07eb85e5d96a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:25:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:25:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3aa9d0b533ad8c60f1c33d005364f848edeb9f798c416c1d4a07eb85e5d96a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3aa9d0b533ad8c60f1c33d005364f848edeb9f798c416c1d4a07eb85e5d96a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3fb19fa23ea81515d14190366f5b7df18eb223dfcca52bf2ba991d4c51f0337","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3aa9d0b533ad8c60f1c33d005364f848edeb9f798c416c1d4a07eb85e5d96a3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3aa9d0b533ad8c60f1c33d005364f848edeb9f798c416c1d4a07eb85e5d96a3"} {"level":"debug","ts":"2026-07-14T20:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3aa9d0b533ad8c60f1c33d005364f848edeb9f798c416c1d4a07eb85e5d96a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:25:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:25:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f3aa9d0b533ad8c60f1c33d005364f848edeb9f798c416c1d4a07eb85e5d96a3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3fb19fa23ea81515d14190366f5b7df18eb223dfcca52bf2ba991d4c51f0337"} {"level":"info","ts":"2026-07-14T20:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3aa9d0b533ad8c60f1c33d005364f848edeb9f798c416c1d4a07eb85e5d96a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3aa9d0b533ad8c60f1c33d005364f848edeb9f798c416c1d4a07eb85e5d96a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:25:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:25:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3aa9d0b533ad8c60f1c33d005364f848edeb9f798c416c1d4a07eb85e5d96a3"} {"level":"info","ts":"2026-07-14T20:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3aa9d0b533ad8c60f1c33d005364f848edeb9f798c416c1d4a07eb85e5d96a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3aa9d0b533ad8c60f1c33d005364f848edeb9f798c416c1d4a07eb85e5d96a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3aa9d0b533ad8c60f1c33d005364f848edeb9f798c416c1d4a07eb85e5d96a3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3aa9d0b533ad8c60f1c33d005364f848edeb9f798c416c1d4a07eb85e5d96a3"} {"level":"debug","ts":"2026-07-14T20:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3aa9d0b533ad8c60f1c33d005364f848edeb9f798c416c1d4a07eb85e5d96a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"092fd288c222062d1f43676b5b52c53400b57182994dc9fcc4c35fa132bc7aff","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3aa9d0b533ad8c60f1c33d005364f848edeb9f798c416c1d4a07eb85e5d96a3"} {"level":"debug","ts":"2026-07-14T20:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"20615bff130e778e8edbd19f276fe6c07f4e3b80fe146d7eb35bb5862c36b968","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/092fd288c222062d1f43676b5b52c53400b57182994dc9fcc4c35fa132bc7aff"} {"level":"debug","ts":"2026-07-14T20:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"44f166e545e921150c43a6f5609dea4ba423cbe2d0b2580cd23f3d14a466179d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3aa9d0b533ad8c60f1c33d005364f848edeb9f798c416c1d4a07eb85e5d96a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:25:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:25:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f3aa9d0b533ad8c60f1c33d005364f848edeb9f798c416c1d4a07eb85e5d96a3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20615bff130e778e8edbd19f276fe6c07f4e3b80fe146d7eb35bb5862c36b968"} {"level":"info","ts":"2026-07-14T20:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3aa9d0b533ad8c60f1c33d005364f848edeb9f798c416c1d4a07eb85e5d96a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"850c6f9b19f2e6867c79d7d9d65046a38257222772e1ba471177620d907bc3db","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3aa9d0b533ad8c60f1c33d005364f848edeb9f798c416c1d4a07eb85e5d96a3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44f166e545e921150c43a6f5609dea4ba423cbe2d0b2580cd23f3d14a466179d"} {"level":"info","ts":"2026-07-14T20:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/850c6f9b19f2e6867c79d7d9d65046a38257222772e1ba471177620d907bc3db"} {"level":"debug","ts":"2026-07-14T20:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62758871bee31fc74865a5eca79ed3679ded465df554b2d6716397b3489ece27","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3aa9d0b533ad8c60f1c33d005364f848edeb9f798c416c1d4a07eb85e5d96a3"} {"level":"debug","ts":"2026-07-14T20:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"38da8c1a655da60e741ee1c0ec3b81f351967d0830900cc9fa12c0558109614c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cbfa9dd5bf131c862db8cc4af053a3ae56f7ae1be83edce9e8cdede1ab5526f0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62758871bee31fc74865a5eca79ed3679ded465df554b2d6716397b3489ece27"} {"level":"debug","ts":"2026-07-14T20:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c9b65c949e1d48a6b1cfa1a7568066a47ced899e0af888985cf621659bb51ad","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38da8c1a655da60e741ee1c0ec3b81f351967d0830900cc9fa12c0558109614c"} {"level":"debug","ts":"2026-07-14T20:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3de18ad8f4884fbba8a6e4612fdef759b83d226963e5dcfca9e8d575f2419a58","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cbfa9dd5bf131c862db8cc4af053a3ae56f7ae1be83edce9e8cdede1ab5526f0"} {"level":"debug","ts":"2026-07-14T20:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"216bad5dd0803c2756146ecce8d54e255285e2b6a311bbf5097dbe75795c8fe0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c9b65c949e1d48a6b1cfa1a7568066a47ced899e0af888985cf621659bb51ad"} {"level":"debug","ts":"2026-07-14T20:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79e5aa0f4fea39312280cc400d4e96dd6f9c8d4b2256eae37c17b0e15203a468","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3de18ad8f4884fbba8a6e4612fdef759b83d226963e5dcfca9e8d575f2419a58"} {"level":"debug","ts":"2026-07-14T20:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae277ecbc8c578edfe4f058b16407d98618208bc9007af82891c1c45fb9f5693","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/216bad5dd0803c2756146ecce8d54e255285e2b6a311bbf5097dbe75795c8fe0"} {"level":"debug","ts":"2026-07-14T20:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48101b477e93b8fd83f1fb7934899d91112f5df1bebc58d0a00411c873843e58","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79e5aa0f4fea39312280cc400d4e96dd6f9c8d4b2256eae37c17b0e15203a468"} {"level":"info","ts":"2026-07-14T20:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae277ecbc8c578edfe4f058b16407d98618208bc9007af82891c1c45fb9f5693"} {"level":"info","ts":"2026-07-14T20:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48101b477e93b8fd83f1fb7934899d91112f5df1bebc58d0a00411c873843e58"} {"level":"info","ts":"2026-07-14T20:25:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6dd0d1b9-ef53-47a3-94a5-0af391967a64","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:47720","PortSpecifier":{"PortValue":47720}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6dd0d1b9-ef53-47a3-94a5-0af391967a64","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-76db83.apps.f432e014-de42-4e5c-8c87-f51ff4616134.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T20:25:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6dd0d1b9-ef53-47a3-94a5-0af391967a64","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:47720","PortSpecifier":{"PortValue":47720}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784060741,"nanos":151423859},"http":{"id":"6dd0d1b9-ef53-47a3-94a5-0af391967a64","method":"POST","headers":{":authority":"e2e-shared-a-76db83.apps.f432e014-de42-4e5c-8c87-f51ff4616134.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T20:25:41Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6dd0d1b9-ef53-47a3-94a5-0af391967a64","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T20:25:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6dd0d1b9-ef53-47a3-94a5-0af391967a64","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"49ca3997-2250-49c1-a4df-f91ee4d9d217","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=10e4cf38-4c6b-49fd-94e4-421e73bde9fc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f51ff4616134"]}} {"level":"debug","ts":"2026-07-14T20:25:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6dd0d1b9-ef53-47a3-94a5-0af391967a64","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f51ff4616134"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=10e4cf38-4c6b-49fd-94e4-421e73bde9fc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"49ca3997-2250-49c1-a4df-f91ee4d9d217","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4fef5f539b37e4ed510c125799947d892a376acd90ebba131ba48acc58ad39f1"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-76db83.apps.f432e014-de42-4e5c-8c87-f51ff4616134.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T20:25:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6dd0d1b9-ef53-47a3-94a5-0af391967a64","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T20:25:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6dd0d1b9-ef53-47a3-94a5-0af391967a64","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T20:25:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6dd0d1b9-ef53-47a3-94a5-0af391967a64","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-76db83/sub-test-model-76db83\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-76db83/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T20:25:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6dd0d1b9-ef53-47a3-94a5-0af391967a64","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T20:25:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6dd0d1b9-ef53-47a3-94a5-0af391967a64","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T20:25:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6dd0d1b9-ef53-47a3-94a5-0af391967a64","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-14T20:25:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6dd0d1b9-ef53-47a3-94a5-0af391967a64","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T20:25:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6dd0d1b9-ef53-47a3-94a5-0af391967a64","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T20:25:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"84e295c4-5d00-4e33-b257-f7824eca9369","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:60284","PortSpecifier":{"PortValue":60284}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"84e295c4-5d00-4e33-b257-f7824eca9369","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-ecc78d.apps.f432e014-de42-4e5c-8c87-f51ff4616134.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T20:25:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"84e295c4-5d00-4e33-b257-f7824eca9369","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:60284","PortSpecifier":{"PortValue":60284}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784060741,"nanos":200416764},"http":{"id":"84e295c4-5d00-4e33-b257-f7824eca9369","method":"POST","headers":{":authority":"e2e-shared-b-ecc78d.apps.f432e014-de42-4e5c-8c87-f51ff4616134.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T20:25:41Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"84e295c4-5d00-4e33-b257-f7824eca9369","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T20:25:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"84e295c4-5d00-4e33-b257-f7824eca9369","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"49ca3997-2250-49c1-a4df-f91ee4d9d217","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=10e4cf38-4c6b-49fd-94e4-421e73bde9fc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f51ff4616134"]}} {"level":"debug","ts":"2026-07-14T20:25:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"84e295c4-5d00-4e33-b257-f7824eca9369","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f51ff4616134"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=10e4cf38-4c6b-49fd-94e4-421e73bde9fc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"49ca3997-2250-49c1-a4df-f91ee4d9d217","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"850c6f9b19f2e6867c79d7d9d65046a38257222772e1ba471177620d907bc3db"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-ecc78d.apps.f432e014-de42-4e5c-8c87-f51ff4616134.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T20:25:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"84e295c4-5d00-4e33-b257-f7824eca9369","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T20:25:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"84e295c4-5d00-4e33-b257-f7824eca9369","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T20:25:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"84e295c4-5d00-4e33-b257-f7824eca9369","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ecc78d/sub-test-model-ecc78d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-ecc78d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T20:25:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"84e295c4-5d00-4e33-b257-f7824eca9369","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T20:25:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"84e295c4-5d00-4e33-b257-f7824eca9369","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T20:25:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"84e295c4-5d00-4e33-b257-f7824eca9369","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T20:25:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"84e295c4-5d00-4e33-b257-f7824eca9369","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T20:25:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"84e295c4-5d00-4e33-b257-f7824eca9369","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T20:25:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2b34af67-1971-421c-844d-e8ccba74760d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:47722","PortSpecifier":{"PortValue":47722}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2b34af67-1971-421c-844d-e8ccba74760d","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-76db83.apps.f432e014-de42-4e5c-8c87-f51ff4616134.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T20:25:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2b34af67-1971-421c-844d-e8ccba74760d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:47722","PortSpecifier":{"PortValue":47722}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784060741,"nanos":241578816},"http":{"id":"2b34af67-1971-421c-844d-e8ccba74760d","method":"GET","headers":{":authority":"e2e-shared-a-76db83.apps.f432e014-de42-4e5c-8c87-f51ff4616134.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T20:25:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2b34af67-1971-421c-844d-e8ccba74760d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-WMiU99IS4BG2ZIGh_hnM84eo6M7hewoRZEYYc25wc8jKHFb4KqgphHVvmf7e"} {"level":"debug","ts":"2026-07-14T20:25:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2b34af67-1971-421c-844d-e8ccba74760d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-76db83.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-WMiU99IS4BG2ZIGh_hnM84eo6M7hewoRZEYYc25wc8jKHFb4KqgphHVvmf7e\"}"} {"level":"debug","ts":"2026-07-14T20:25:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2b34af67-1971-421c-844d-e8ccba74760d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-76db83.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ded1ba5e-b230-45f6-bfac-c2b7c3acb0e1","keyName":"e2e-sub-iso-539c5c","subscription":"e2e-a-only-5e107b","tenant":"e2e-shared-a-76db83","userId":"ded1ba5e-b230-45f6-bfac-c2b7c3acb0e1","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T20:25:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2b34af67-1971-421c-844d-e8ccba74760d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T20:25:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2b34af67-1971-421c-844d-e8ccba74760d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T20:25:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2b34af67-1971-421c-844d-e8ccba74760d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T20:25:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2b34af67-1971-421c-844d-e8ccba74760d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-76db83/sub-test-model-76db83\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-76db83/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T20:25:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2b34af67-1971-421c-844d-e8ccba74760d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T20:25:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2b34af67-1971-421c-844d-e8ccba74760d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-14T20:25:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2b34af67-1971-421c-844d-e8ccba74760d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T20:25:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2b34af67-1971-421c-844d-e8ccba74760d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-5e107b"} {"level":"info","ts":"2026-07-14T20:25:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2b34af67-1971-421c-844d-e8ccba74760d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T20:25:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2b34af67-1971-421c-844d-e8ccba74760d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T20:25:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4e8c08ef-f0e9-464b-8cf4-e01e9d4e4c50","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:60286","PortSpecifier":{"PortValue":60286}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4e8c08ef-f0e9-464b-8cf4-e01e9d4e4c50","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-ecc78d.apps.f432e014-de42-4e5c-8c87-f51ff4616134.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T20:25:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4e8c08ef-f0e9-464b-8cf4-e01e9d4e4c50","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:60286","PortSpecifier":{"PortValue":60286}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784060741,"nanos":283640902},"http":{"id":"4e8c08ef-f0e9-464b-8cf4-e01e9d4e4c50","method":"GET","headers":{":authority":"e2e-shared-b-ecc78d.apps.f432e014-de42-4e5c-8c87-f51ff4616134.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T20:25:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4e8c08ef-f0e9-464b-8cf4-e01e9d4e4c50","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-gyzgJxixsSde91Zm_VmK3x05mwfPwZwDwWlvFWc51T5lAtKe2Ac8O85Liqzt"} {"level":"debug","ts":"2026-07-14T20:25:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4e8c08ef-f0e9-464b-8cf4-e01e9d4e4c50","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-ecc78d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-gyzgJxixsSde91Zm_VmK3x05mwfPwZwDwWlvFWc51T5lAtKe2Ac8O85Liqzt\"}"} {"level":"debug","ts":"2026-07-14T20:25:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4e8c08ef-f0e9-464b-8cf4-e01e9d4e4c50","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-ecc78d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"658b468a-a4f8-4f78-bdee-57ad4e305df4","keyName":"e2e-sub-iso-936d5d","subscription":"e2e-b-only-5e107b","tenant":"e2e-shared-b-ecc78d","userId":"658b468a-a4f8-4f78-bdee-57ad4e305df4","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T20:25:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4e8c08ef-f0e9-464b-8cf4-e01e9d4e4c50","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T20:25:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4e8c08ef-f0e9-464b-8cf4-e01e9d4e4c50","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T20:25:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4e8c08ef-f0e9-464b-8cf4-e01e9d4e4c50","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T20:25:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4e8c08ef-f0e9-464b-8cf4-e01e9d4e4c50","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ecc78d/sub-test-model-ecc78d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-ecc78d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T20:25:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4e8c08ef-f0e9-464b-8cf4-e01e9d4e4c50","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T20:25:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4e8c08ef-f0e9-464b-8cf4-e01e9d4e4c50","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-5e107b"} {"level":"debug","ts":"2026-07-14T20:25:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4e8c08ef-f0e9-464b-8cf4-e01e9d4e4c50","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T20:25:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4e8c08ef-f0e9-464b-8cf4-e01e9d4e4c50","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-14T20:25:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4e8c08ef-f0e9-464b-8cf4-e01e9d4e4c50","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T20:25:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4e8c08ef-f0e9-464b-8cf4-e01e9d4e4c50","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T20:26:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"11328fe1-b850-41e2-b8ca-2f4f089965a9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:57278","PortSpecifier":{"PortValue":57278}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"11328fe1-b850-41e2-b8ca-2f4f089965a9","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-76db83.apps.f432e014-de42-4e5c-8c87-f51ff4616134.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T20:26:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"11328fe1-b850-41e2-b8ca-2f4f089965a9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:57278","PortSpecifier":{"PortValue":57278}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784060760,"nanos":115090418},"http":{"id":"11328fe1-b850-41e2-b8ca-2f4f089965a9","method":"POST","headers":{":authority":"e2e-shared-a-76db83.apps.f432e014-de42-4e5c-8c87-f51ff4616134.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T20:26:00Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"11328fe1-b850-41e2-b8ca-2f4f089965a9","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T20:26:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"11328fe1-b850-41e2-b8ca-2f4f089965a9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"49ca3997-2250-49c1-a4df-f91ee4d9d217","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=10e4cf38-4c6b-49fd-94e4-421e73bde9fc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f51ff4616134"]}} {"level":"debug","ts":"2026-07-14T20:26:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"11328fe1-b850-41e2-b8ca-2f4f089965a9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f51ff4616134"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=10e4cf38-4c6b-49fd-94e4-421e73bde9fc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"49ca3997-2250-49c1-a4df-f91ee4d9d217","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4fef5f539b37e4ed510c125799947d892a376acd90ebba131ba48acc58ad39f1"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-76db83.apps.f432e014-de42-4e5c-8c87-f51ff4616134.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T20:26:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"11328fe1-b850-41e2-b8ca-2f4f089965a9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T20:26:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"11328fe1-b850-41e2-b8ca-2f4f089965a9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T20:26:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"11328fe1-b850-41e2-b8ca-2f4f089965a9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-76db83/sub-test-model-76db83\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-76db83/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T20:26:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"11328fe1-b850-41e2-b8ca-2f4f089965a9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T20:26:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"11328fe1-b850-41e2-b8ca-2f4f089965a9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T20:26:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"11328fe1-b850-41e2-b8ca-2f4f089965a9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T20:26:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"11328fe1-b850-41e2-b8ca-2f4f089965a9","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T20:26:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"11328fe1-b850-41e2-b8ca-2f4f089965a9","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T20:26:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"06690902-0fcc-447e-9e91-003fe5e99578","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:58152","PortSpecifier":{"PortValue":58152}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"06690902-0fcc-447e-9e91-003fe5e99578","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-ecc78d.apps.f432e014-de42-4e5c-8c87-f51ff4616134.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T20:26:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"06690902-0fcc-447e-9e91-003fe5e99578","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:58152","PortSpecifier":{"PortValue":58152}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784060760,"nanos":153971823},"http":{"id":"06690902-0fcc-447e-9e91-003fe5e99578","method":"POST","headers":{":authority":"e2e-shared-b-ecc78d.apps.f432e014-de42-4e5c-8c87-f51ff4616134.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T20:26:00Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"06690902-0fcc-447e-9e91-003fe5e99578","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T20:26:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"06690902-0fcc-447e-9e91-003fe5e99578","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"49ca3997-2250-49c1-a4df-f91ee4d9d217","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=10e4cf38-4c6b-49fd-94e4-421e73bde9fc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f51ff4616134"]}} {"level":"debug","ts":"2026-07-14T20:26:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"06690902-0fcc-447e-9e91-003fe5e99578","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f51ff4616134"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=10e4cf38-4c6b-49fd-94e4-421e73bde9fc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"49ca3997-2250-49c1-a4df-f91ee4d9d217","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"850c6f9b19f2e6867c79d7d9d65046a38257222772e1ba471177620d907bc3db"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-ecc78d.apps.f432e014-de42-4e5c-8c87-f51ff4616134.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T20:26:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"06690902-0fcc-447e-9e91-003fe5e99578","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T20:26:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"06690902-0fcc-447e-9e91-003fe5e99578","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T20:26:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"06690902-0fcc-447e-9e91-003fe5e99578","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ecc78d/sub-test-model-ecc78d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-ecc78d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T20:26:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"06690902-0fcc-447e-9e91-003fe5e99578","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T20:26:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"06690902-0fcc-447e-9e91-003fe5e99578","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T20:26:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"06690902-0fcc-447e-9e91-003fe5e99578","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T20:26:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"06690902-0fcc-447e-9e91-003fe5e99578","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T20:26:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"06690902-0fcc-447e-9e91-003fe5e99578","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T20:26:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d3dae520-df75-42b5-b865-80dd7c123e83","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:57294","PortSpecifier":{"PortValue":57294}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d3dae520-df75-42b5-b865-80dd7c123e83","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-76db83.apps.f432e014-de42-4e5c-8c87-f51ff4616134.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T20:26:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d3dae520-df75-42b5-b865-80dd7c123e83","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:57294","PortSpecifier":{"PortValue":57294}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784060760,"nanos":187738185},"http":{"id":"d3dae520-df75-42b5-b865-80dd7c123e83","method":"POST","headers":{":authority":"e2e-shared-a-76db83.apps.f432e014-de42-4e5c-8c87-f51ff4616134.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T20:26:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d3dae520-df75-42b5-b865-80dd7c123e83","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-tznJ5dEEtsXiI5xU_iyNJaIZAX7Iz69iHNjlFto98NZKylCsmTgdZKxnJWm"} {"level":"debug","ts":"2026-07-14T20:26:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d3dae520-df75-42b5-b865-80dd7c123e83","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-76db83.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-tznJ5dEEtsXiI5xU_iyNJaIZAX7Iz69iHNjlFto98NZKylCsmTgdZKxnJWm\"}"} {"level":"debug","ts":"2026-07-14T20:26:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d3dae520-df75-42b5-b865-80dd7c123e83","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-76db83.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"91cb2fac-cbf4-4ecf-a404-72c31795b2da","keyName":"e2e-sub-iso-c625c4","subscription":"e2e-shared-sub-21edda","tenant":"e2e-shared-a-76db83","userId":"91cb2fac-cbf4-4ecf-a404-72c31795b2da","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T20:26:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d3dae520-df75-42b5-b865-80dd7c123e83","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T20:26:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d3dae520-df75-42b5-b865-80dd7c123e83","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T20:26:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d3dae520-df75-42b5-b865-80dd7c123e83","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T20:26:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d3dae520-df75-42b5-b865-80dd7c123e83","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-76db83/sub-test-model-76db83\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-76db83/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T20:26:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d3dae520-df75-42b5-b865-80dd7c123e83","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T20:26:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d3dae520-df75-42b5-b865-80dd7c123e83","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-14T20:26:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d3dae520-df75-42b5-b865-80dd7c123e83","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T20:26:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d3dae520-df75-42b5-b865-80dd7c123e83","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-21edda"} {"level":"info","ts":"2026-07-14T20:26:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d3dae520-df75-42b5-b865-80dd7c123e83","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T20:26:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d3dae520-df75-42b5-b865-80dd7c123e83","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T20:26:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8eab2b1f-a198-4191-983b-d56c7a75efc9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:58158","PortSpecifier":{"PortValue":58158}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8eab2b1f-a198-4191-983b-d56c7a75efc9","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-ecc78d.apps.f432e014-de42-4e5c-8c87-f51ff4616134.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T20:26:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8eab2b1f-a198-4191-983b-d56c7a75efc9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:58158","PortSpecifier":{"PortValue":58158}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784060760,"nanos":223353299},"http":{"id":"8eab2b1f-a198-4191-983b-d56c7a75efc9","method":"POST","headers":{":authority":"e2e-shared-b-ecc78d.apps.f432e014-de42-4e5c-8c87-f51ff4616134.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T20:26:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8eab2b1f-a198-4191-983b-d56c7a75efc9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1etAgx490eiXrffWn_79smzfAno0cCVLtnwQCgy8jI66OW3sCMmcHaqoyzYYi"} {"level":"debug","ts":"2026-07-14T20:26:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8eab2b1f-a198-4191-983b-d56c7a75efc9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-ecc78d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1etAgx490eiXrffWn_79smzfAno0cCVLtnwQCgy8jI66OW3sCMmcHaqoyzYYi\"}"} {"level":"debug","ts":"2026-07-14T20:26:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8eab2b1f-a198-4191-983b-d56c7a75efc9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-ecc78d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"fb2381f7-8822-49e5-951a-41fb69f5aa9f","keyName":"e2e-sub-iso-90c824","subscription":"e2e-shared-sub-21edda","tenant":"e2e-shared-b-ecc78d","userId":"fb2381f7-8822-49e5-951a-41fb69f5aa9f","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T20:26:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8eab2b1f-a198-4191-983b-d56c7a75efc9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T20:26:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8eab2b1f-a198-4191-983b-d56c7a75efc9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T20:26:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8eab2b1f-a198-4191-983b-d56c7a75efc9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T20:26:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8eab2b1f-a198-4191-983b-d56c7a75efc9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ecc78d/sub-test-model-ecc78d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-ecc78d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T20:26:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8eab2b1f-a198-4191-983b-d56c7a75efc9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T20:26:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8eab2b1f-a198-4191-983b-d56c7a75efc9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-21edda"} {"level":"debug","ts":"2026-07-14T20:26:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8eab2b1f-a198-4191-983b-d56c7a75efc9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T20:26:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8eab2b1f-a198-4191-983b-d56c7a75efc9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-14T20:26:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8eab2b1f-a198-4191-983b-d56c7a75efc9","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T20:26:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8eab2b1f-a198-4191-983b-d56c7a75efc9","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T20:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/62758871bee31fc74865a5eca79ed3679ded465df554b2d6716397b3489ece27"} {"level":"info","ts":"2026-07-14T20:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/48101b477e93b8fd83f1fb7934899d91112f5df1bebc58d0a00411c873843e58"} {"level":"info","ts":"2026-07-14T20:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/092fd288c222062d1f43676b5b52c53400b57182994dc9fcc4c35fa132bc7aff"} {"level":"info","ts":"2026-07-14T20:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/38da8c1a655da60e741ee1c0ec3b81f351967d0830900cc9fa12c0558109614c"} {"level":"info","ts":"2026-07-14T20:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b83999a6ad47212fb6534dc94b43d3f6c46de9bc96e2bc89e6819a04a505111c"} {"level":"info","ts":"2026-07-14T20:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/216bad5dd0803c2756146ecce8d54e255285e2b6a311bbf5097dbe75795c8fe0"} {"level":"info","ts":"2026-07-14T20:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/20615bff130e778e8edbd19f276fe6c07f4e3b80fe146d7eb35bb5862c36b968"} {"level":"info","ts":"2026-07-14T20:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/79e5aa0f4fea39312280cc400d4e96dd6f9c8d4b2256eae37c17b0e15203a468"} {"level":"info","ts":"2026-07-14T20:26:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ae9208b5eed0c1e9d0084aac6964f7590ac60cea2fe66685f46f2be4e7626cfa"} {"level":"info","ts":"2026-07-14T20:26:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/73bdc7cb45970cf3e3b97a60476a5727db12be56c041d9832325801db4cc16bc"} {"level":"info","ts":"2026-07-14T20:26:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3454c5a4dbed20c6df2426eb08ea27ecc5899e0786a959013b24927dd9284441"} {"level":"info","ts":"2026-07-14T20:26:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c6899ad2782dcb89bbb4c190af910430716042c6f62faedc962cd8505a23dc2e"} {"level":"info","ts":"2026-07-14T20:26:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/44f166e545e921150c43a6f5609dea4ba423cbe2d0b2580cd23f3d14a466179d"} {"level":"info","ts":"2026-07-14T20:26:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3de18ad8f4884fbba8a6e4612fdef759b83d226963e5dcfca9e8d575f2419a58"} {"level":"info","ts":"2026-07-14T20:26:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f3aa9d0b533ad8c60f1c33d005364f848edeb9f798c416c1d4a07eb85e5d96a3"} {"level":"info","ts":"2026-07-14T20:26:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f3fb19fa23ea81515d14190366f5b7df18eb223dfcca52bf2ba991d4c51f0337"} {"level":"debug","ts":"2026-07-14T20:26:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a5f1a7a4b5b713c9ca3e43cf9562cd702115c5a182e40862afb54235f76a4cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:26:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:26:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:26:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a5f1a7a4b5b713c9ca3e43cf9562cd702115c5a182e40862afb54235f76a4cc"} {"level":"info","ts":"2026-07-14T20:26:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a5f1a7a4b5b713c9ca3e43cf9562cd702115c5a182e40862afb54235f76a4cc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:26:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a5f1a7a4b5b713c9ca3e43cf9562cd702115c5a182e40862afb54235f76a4cc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:26:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a5f1a7a4b5b713c9ca3e43cf9562cd702115c5a182e40862afb54235f76a4cc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:26:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a5f1a7a4b5b713c9ca3e43cf9562cd702115c5a182e40862afb54235f76a4cc"} {"level":"debug","ts":"2026-07-14T20:26:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a5f1a7a4b5b713c9ca3e43cf9562cd702115c5a182e40862afb54235f76a4cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:26:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:26:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a5f1a7a4b5b713c9ca3e43cf9562cd702115c5a182e40862afb54235f76a4cc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:26:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a5f1a7a4b5b713c9ca3e43cf9562cd702115c5a182e40862afb54235f76a4cc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:26:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a5f1a7a4b5b713c9ca3e43cf9562cd702115c5a182e40862afb54235f76a4cc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:26:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a5f1a7a4b5b713c9ca3e43cf9562cd702115c5a182e40862afb54235f76a4cc"} {"level":"debug","ts":"2026-07-14T20:26:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"570326af879efadf5a2a64fb1c07473224d090176f66c70a74ff7f76a2d2de28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:26:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:26:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:26:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"570326af879efadf5a2a64fb1c07473224d090176f66c70a74ff7f76a2d2de28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:26:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"570326af879efadf5a2a64fb1c07473224d090176f66c70a74ff7f76a2d2de28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:26:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"570326af879efadf5a2a64fb1c07473224d090176f66c70a74ff7f76a2d2de28","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:26:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/570326af879efadf5a2a64fb1c07473224d090176f66c70a74ff7f76a2d2de28"} {"level":"debug","ts":"2026-07-14T20:26:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"570326af879efadf5a2a64fb1c07473224d090176f66c70a74ff7f76a2d2de28","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:26:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/570326af879efadf5a2a64fb1c07473224d090176f66c70a74ff7f76a2d2de28"} {"level":"debug","ts":"2026-07-14T20:26:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"570326af879efadf5a2a64fb1c07473224d090176f66c70a74ff7f76a2d2de28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:26:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:26:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["570326af879efadf5a2a64fb1c07473224d090176f66c70a74ff7f76a2d2de28"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:26:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"570326af879efadf5a2a64fb1c07473224d090176f66c70a74ff7f76a2d2de28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:26:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"570326af879efadf5a2a64fb1c07473224d090176f66c70a74ff7f76a2d2de28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:26:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:26:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:26:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"570326af879efadf5a2a64fb1c07473224d090176f66c70a74ff7f76a2d2de28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:26:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"570326af879efadf5a2a64fb1c07473224d090176f66c70a74ff7f76a2d2de28","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:26:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/570326af879efadf5a2a64fb1c07473224d090176f66c70a74ff7f76a2d2de28"} {"level":"debug","ts":"2026-07-14T20:26:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"570326af879efadf5a2a64fb1c07473224d090176f66c70a74ff7f76a2d2de28","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:26:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/570326af879efadf5a2a64fb1c07473224d090176f66c70a74ff7f76a2d2de28"} {"level":"debug","ts":"2026-07-14T20:26:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"570326af879efadf5a2a64fb1c07473224d090176f66c70a74ff7f76a2d2de28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:26:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:26:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["570326af879efadf5a2a64fb1c07473224d090176f66c70a74ff7f76a2d2de28"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:26:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"570326af879efadf5a2a64fb1c07473224d090176f66c70a74ff7f76a2d2de28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:26:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"570326af879efadf5a2a64fb1c07473224d090176f66c70a74ff7f76a2d2de28","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:26:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/570326af879efadf5a2a64fb1c07473224d090176f66c70a74ff7f76a2d2de28"} {"level":"debug","ts":"2026-07-14T20:26:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9fbd0307114c9cbaad76ac7a8dfa807ad766fe8de6b44a13912bd7c27af06c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:26:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:26:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:26:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9fbd0307114c9cbaad76ac7a8dfa807ad766fe8de6b44a13912bd7c27af06c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:26:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9fbd0307114c9cbaad76ac7a8dfa807ad766fe8de6b44a13912bd7c27af06c0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:26:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9fbd0307114c9cbaad76ac7a8dfa807ad766fe8de6b44a13912bd7c27af06c0"} {"level":"debug","ts":"2026-07-14T20:26:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9fbd0307114c9cbaad76ac7a8dfa807ad766fe8de6b44a13912bd7c27af06c0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:26:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9fbd0307114c9cbaad76ac7a8dfa807ad766fe8de6b44a13912bd7c27af06c0"} {"level":"debug","ts":"2026-07-14T20:26:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9fbd0307114c9cbaad76ac7a8dfa807ad766fe8de6b44a13912bd7c27af06c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:26:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:26:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a9fbd0307114c9cbaad76ac7a8dfa807ad766fe8de6b44a13912bd7c27af06c0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:26:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9fbd0307114c9cbaad76ac7a8dfa807ad766fe8de6b44a13912bd7c27af06c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:26:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9fbd0307114c9cbaad76ac7a8dfa807ad766fe8de6b44a13912bd7c27af06c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:26:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:26:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:26:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9fbd0307114c9cbaad76ac7a8dfa807ad766fe8de6b44a13912bd7c27af06c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:26:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9fbd0307114c9cbaad76ac7a8dfa807ad766fe8de6b44a13912bd7c27af06c0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:26:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9fbd0307114c9cbaad76ac7a8dfa807ad766fe8de6b44a13912bd7c27af06c0"} {"level":"debug","ts":"2026-07-14T20:26:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9fbd0307114c9cbaad76ac7a8dfa807ad766fe8de6b44a13912bd7c27af06c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:26:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f507079541e8389d6122335071e7f9d21cb19719105f1c9e0325d0941f7e5b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:26:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:26:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:26:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9fbd0307114c9cbaad76ac7a8dfa807ad766fe8de6b44a13912bd7c27af06c0"} {"level":"info","ts":"2026-07-14T20:26:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f507079541e8389d6122335071e7f9d21cb19719105f1c9e0325d0941f7e5b8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:26:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9fbd0307114c9cbaad76ac7a8dfa807ad766fe8de6b44a13912bd7c27af06c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:26:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:26:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a9fbd0307114c9cbaad76ac7a8dfa807ad766fe8de6b44a13912bd7c27af06c0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:26:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f507079541e8389d6122335071e7f9d21cb19719105f1c9e0325d0941f7e5b8"} {"level":"info","ts":"2026-07-14T20:26:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9fbd0307114c9cbaad76ac7a8dfa807ad766fe8de6b44a13912bd7c27af06c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:26:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f507079541e8389d6122335071e7f9d21cb19719105f1c9e0325d0941f7e5b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:26:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:26:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:26:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f507079541e8389d6122335071e7f9d21cb19719105f1c9e0325d0941f7e5b8"} {"level":"info","ts":"2026-07-14T20:26:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f507079541e8389d6122335071e7f9d21cb19719105f1c9e0325d0941f7e5b8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:26:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9fbd0307114c9cbaad76ac7a8dfa807ad766fe8de6b44a13912bd7c27af06c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:26:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:26:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:26:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9fbd0307114c9cbaad76ac7a8dfa807ad766fe8de6b44a13912bd7c27af06c0"} {"level":"info","ts":"2026-07-14T20:26:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9fbd0307114c9cbaad76ac7a8dfa807ad766fe8de6b44a13912bd7c27af06c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:26:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f507079541e8389d6122335071e7f9d21cb19719105f1c9e0325d0941f7e5b8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:26:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9fbd0307114c9cbaad76ac7a8dfa807ad766fe8de6b44a13912bd7c27af06c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:26:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:26:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a9fbd0307114c9cbaad76ac7a8dfa807ad766fe8de6b44a13912bd7c27af06c0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:26:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f507079541e8389d6122335071e7f9d21cb19719105f1c9e0325d0941f7e5b8"} {"level":"info","ts":"2026-07-14T20:26:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9fbd0307114c9cbaad76ac7a8dfa807ad766fe8de6b44a13912bd7c27af06c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:26:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9fbd0307114c9cbaad76ac7a8dfa807ad766fe8de6b44a13912bd7c27af06c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:26:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f507079541e8389d6122335071e7f9d21cb19719105f1c9e0325d0941f7e5b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:26:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:26:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3f507079541e8389d6122335071e7f9d21cb19719105f1c9e0325d0941f7e5b8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:26:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9fbd0307114c9cbaad76ac7a8dfa807ad766fe8de6b44a13912bd7c27af06c0"} {"level":"info","ts":"2026-07-14T20:26:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f507079541e8389d6122335071e7f9d21cb19719105f1c9e0325d0941f7e5b8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:26:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9fbd0307114c9cbaad76ac7a8dfa807ad766fe8de6b44a13912bd7c27af06c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:26:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a2038c67495b7cae4a744546f2212afd3463b916b7f7aaeb29cba469857bfabe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:26:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:26:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:26:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a2038c67495b7cae4a744546f2212afd3463b916b7f7aaeb29cba469857bfabe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:26:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f507079541e8389d6122335071e7f9d21cb19719105f1c9e0325d0941f7e5b8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:26:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a2038c67495b7cae4a744546f2212afd3463b916b7f7aaeb29cba469857bfabe","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:26:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2038c67495b7cae4a744546f2212afd3463b916b7f7aaeb29cba469857bfabe"} {"level":"debug","ts":"2026-07-14T20:26:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a2038c67495b7cae4a744546f2212afd3463b916b7f7aaeb29cba469857bfabe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:26:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:26:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a2038c67495b7cae4a744546f2212afd3463b916b7f7aaeb29cba469857bfabe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:26:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a2038c67495b7cae4a744546f2212afd3463b916b7f7aaeb29cba469857bfabe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:26:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a2038c67495b7cae4a744546f2212afd3463b916b7f7aaeb29cba469857bfabe","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:26:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9fbd0307114c9cbaad76ac7a8dfa807ad766fe8de6b44a13912bd7c27af06c0"} {"level":"info","ts":"2026-07-14T20:26:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f507079541e8389d6122335071e7f9d21cb19719105f1c9e0325d0941f7e5b8"} {"level":"info","ts":"2026-07-14T20:26:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2038c67495b7cae4a744546f2212afd3463b916b7f7aaeb29cba469857bfabe"} {"level":"debug","ts":"2026-07-14T20:26:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6f2248de1ab1ef405c3d1f9f94f30e6863f415d866cb453b4a13c085df9e42e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:26:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:26:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:26:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6f2248de1ab1ef405c3d1f9f94f30e6863f415d866cb453b4a13c085df9e42e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:26:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6f2248de1ab1ef405c3d1f9f94f30e6863f415d866cb453b4a13c085df9e42e"} {"level":"debug","ts":"2026-07-14T20:26:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6f2248de1ab1ef405c3d1f9f94f30e6863f415d866cb453b4a13c085df9e42e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:26:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6f2248de1ab1ef405c3d1f9f94f30e6863f415d866cb453b4a13c085df9e42e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:26:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6f2248de1ab1ef405c3d1f9f94f30e6863f415d866cb453b4a13c085df9e42e"} {"level":"debug","ts":"2026-07-14T20:26:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6f2248de1ab1ef405c3d1f9f94f30e6863f415d866cb453b4a13c085df9e42e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:26:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:26:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b6f2248de1ab1ef405c3d1f9f94f30e6863f415d866cb453b4a13c085df9e42e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:26:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6f2248de1ab1ef405c3d1f9f94f30e6863f415d866cb453b4a13c085df9e42e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:26:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6f2248de1ab1ef405c3d1f9f94f30e6863f415d866cb453b4a13c085df9e42e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:26:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:26:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:26:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6f2248de1ab1ef405c3d1f9f94f30e6863f415d866cb453b4a13c085df9e42e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:26:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6f2248de1ab1ef405c3d1f9f94f30e6863f415d866cb453b4a13c085df9e42e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:26:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6f2248de1ab1ef405c3d1f9f94f30e6863f415d866cb453b4a13c085df9e42e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:26:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6f2248de1ab1ef405c3d1f9f94f30e6863f415d866cb453b4a13c085df9e42e"} {"level":"debug","ts":"2026-07-14T20:26:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3068e2153b64b51eb3ef81ac4bfe59c2985a5fd92a636b18321da620b2776fdc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:26:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:26:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:26:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6f2248de1ab1ef405c3d1f9f94f30e6863f415d866cb453b4a13c085df9e42e"} {"level":"info","ts":"2026-07-14T20:26:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3068e2153b64b51eb3ef81ac4bfe59c2985a5fd92a636b18321da620b2776fdc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:26:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6f2248de1ab1ef405c3d1f9f94f30e6863f415d866cb453b4a13c085df9e42e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:26:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:26:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b6f2248de1ab1ef405c3d1f9f94f30e6863f415d866cb453b4a13c085df9e42e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:26:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3068e2153b64b51eb3ef81ac4bfe59c2985a5fd92a636b18321da620b2776fdc"} {"level":"info","ts":"2026-07-14T20:26:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6f2248de1ab1ef405c3d1f9f94f30e6863f415d866cb453b4a13c085df9e42e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:26:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3068e2153b64b51eb3ef81ac4bfe59c2985a5fd92a636b18321da620b2776fdc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:26:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:26:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:26:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3068e2153b64b51eb3ef81ac4bfe59c2985a5fd92a636b18321da620b2776fdc"} {"level":"info","ts":"2026-07-14T20:26:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3068e2153b64b51eb3ef81ac4bfe59c2985a5fd92a636b18321da620b2776fdc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:26:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6f2248de1ab1ef405c3d1f9f94f30e6863f415d866cb453b4a13c085df9e42e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:26:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:26:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:26:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6f2248de1ab1ef405c3d1f9f94f30e6863f415d866cb453b4a13c085df9e42e"} {"level":"info","ts":"2026-07-14T20:26:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6f2248de1ab1ef405c3d1f9f94f30e6863f415d866cb453b4a13c085df9e42e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:26:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3068e2153b64b51eb3ef81ac4bfe59c2985a5fd92a636b18321da620b2776fdc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:26:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6f2248de1ab1ef405c3d1f9f94f30e6863f415d866cb453b4a13c085df9e42e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:26:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:26:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b6f2248de1ab1ef405c3d1f9f94f30e6863f415d866cb453b4a13c085df9e42e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:26:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3068e2153b64b51eb3ef81ac4bfe59c2985a5fd92a636b18321da620b2776fdc"} {"level":"info","ts":"2026-07-14T20:26:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6f2248de1ab1ef405c3d1f9f94f30e6863f415d866cb453b4a13c085df9e42e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:26:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6f2248de1ab1ef405c3d1f9f94f30e6863f415d866cb453b4a13c085df9e42e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:26:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6f2248de1ab1ef405c3d1f9f94f30e6863f415d866cb453b4a13c085df9e42e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:26:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:26:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:26:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6f2248de1ab1ef405c3d1f9f94f30e6863f415d866cb453b4a13c085df9e42e"} {"level":"info","ts":"2026-07-14T20:26:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6f2248de1ab1ef405c3d1f9f94f30e6863f415d866cb453b4a13c085df9e42e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:26:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3068e2153b64b51eb3ef81ac4bfe59c2985a5fd92a636b18321da620b2776fdc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:26:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:26:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3068e2153b64b51eb3ef81ac4bfe59c2985a5fd92a636b18321da620b2776fdc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:26:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3068e2153b64b51eb3ef81ac4bfe59c2985a5fd92a636b18321da620b2776fdc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:26:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6f2248de1ab1ef405c3d1f9f94f30e6863f415d866cb453b4a13c085df9e42e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:26:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3068e2153b64b51eb3ef81ac4bfe59c2985a5fd92a636b18321da620b2776fdc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:26:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6f2248de1ab1ef405c3d1f9f94f30e6863f415d866cb453b4a13c085df9e42e"} {"level":"debug","ts":"2026-07-14T20:26:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6f2248de1ab1ef405c3d1f9f94f30e6863f415d866cb453b4a13c085df9e42e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:26:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:26:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b6f2248de1ab1ef405c3d1f9f94f30e6863f415d866cb453b4a13c085df9e42e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:26:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3068e2153b64b51eb3ef81ac4bfe59c2985a5fd92a636b18321da620b2776fdc"} {"level":"info","ts":"2026-07-14T20:26:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6f2248de1ab1ef405c3d1f9f94f30e6863f415d866cb453b4a13c085df9e42e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:26:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6f2248de1ab1ef405c3d1f9f94f30e6863f415d866cb453b4a13c085df9e42e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:26:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:26:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:26:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6f2248de1ab1ef405c3d1f9f94f30e6863f415d866cb453b4a13c085df9e42e"} {"level":"info","ts":"2026-07-14T20:26:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6f2248de1ab1ef405c3d1f9f94f30e6863f415d866cb453b4a13c085df9e42e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:26:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6f2248de1ab1ef405c3d1f9f94f30e6863f415d866cb453b4a13c085df9e42e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:26:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6f2248de1ab1ef405c3d1f9f94f30e6863f415d866cb453b4a13c085df9e42e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:26:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6f2248de1ab1ef405c3d1f9f94f30e6863f415d866cb453b4a13c085df9e42e"} {"level":"debug","ts":"2026-07-14T20:26:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6f2248de1ab1ef405c3d1f9f94f30e6863f415d866cb453b4a13c085df9e42e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:26:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a621e94fde00d5580e2a472cff5d3cc17cf80643dfa78aeee2ca1127b6d51ae7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:26:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:26:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:26:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6f2248de1ab1ef405c3d1f9f94f30e6863f415d866cb453b4a13c085df9e42e"} {"level":"info","ts":"2026-07-14T20:26:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a621e94fde00d5580e2a472cff5d3cc17cf80643dfa78aeee2ca1127b6d51ae7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:26:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a621e94fde00d5580e2a472cff5d3cc17cf80643dfa78aeee2ca1127b6d51ae7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:26:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:26:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:26:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a621e94fde00d5580e2a472cff5d3cc17cf80643dfa78aeee2ca1127b6d51ae7"} {"level":"info","ts":"2026-07-14T20:26:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a621e94fde00d5580e2a472cff5d3cc17cf80643dfa78aeee2ca1127b6d51ae7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:26:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a621e94fde00d5580e2a472cff5d3cc17cf80643dfa78aeee2ca1127b6d51ae7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:26:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:26:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-14T20:26:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a621e94fde00d5580e2a472cff5d3cc17cf80643dfa78aeee2ca1127b6d51ae7","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a621e94fde00d5580e2a472cff5d3cc17cf80643dfa78aeee2ca1127b6d51ae7\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T20:26:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6f2248de1ab1ef405c3d1f9f94f30e6863f415d866cb453b4a13c085df9e42e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:26:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:26:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b6f2248de1ab1ef405c3d1f9f94f30e6863f415d866cb453b4a13c085df9e42e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:26:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a621e94fde00d5580e2a472cff5d3cc17cf80643dfa78aeee2ca1127b6d51ae7"} {"level":"info","ts":"2026-07-14T20:26:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6f2248de1ab1ef405c3d1f9f94f30e6863f415d866cb453b4a13c085df9e42e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:26:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a621e94fde00d5580e2a472cff5d3cc17cf80643dfa78aeee2ca1127b6d51ae7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:26:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6f2248de1ab1ef405c3d1f9f94f30e6863f415d866cb453b4a13c085df9e42e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:26:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a621e94fde00d5580e2a472cff5d3cc17cf80643dfa78aeee2ca1127b6d51ae7"} {"level":"info","ts":"2026-07-14T20:26:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6f2248de1ab1ef405c3d1f9f94f30e6863f415d866cb453b4a13c085df9e42e"} {"level":"debug","ts":"2026-07-14T20:26:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a621e94fde00d5580e2a472cff5d3cc17cf80643dfa78aeee2ca1127b6d51ae7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:26:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:26:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a621e94fde00d5580e2a472cff5d3cc17cf80643dfa78aeee2ca1127b6d51ae7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:26:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a621e94fde00d5580e2a472cff5d3cc17cf80643dfa78aeee2ca1127b6d51ae7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:26:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a621e94fde00d5580e2a472cff5d3cc17cf80643dfa78aeee2ca1127b6d51ae7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:26:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:26:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:26:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a621e94fde00d5580e2a472cff5d3cc17cf80643dfa78aeee2ca1127b6d51ae7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:26:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a621e94fde00d5580e2a472cff5d3cc17cf80643dfa78aeee2ca1127b6d51ae7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:26:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a621e94fde00d5580e2a472cff5d3cc17cf80643dfa78aeee2ca1127b6d51ae7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:26:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a621e94fde00d5580e2a472cff5d3cc17cf80643dfa78aeee2ca1127b6d51ae7"} {"level":"debug","ts":"2026-07-14T20:26:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a621e94fde00d5580e2a472cff5d3cc17cf80643dfa78aeee2ca1127b6d51ae7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:26:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a621e94fde00d5580e2a472cff5d3cc17cf80643dfa78aeee2ca1127b6d51ae7"} {"level":"debug","ts":"2026-07-14T20:26:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a621e94fde00d5580e2a472cff5d3cc17cf80643dfa78aeee2ca1127b6d51ae7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:26:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:26:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a621e94fde00d5580e2a472cff5d3cc17cf80643dfa78aeee2ca1127b6d51ae7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:26:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a621e94fde00d5580e2a472cff5d3cc17cf80643dfa78aeee2ca1127b6d51ae7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:26:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a621e94fde00d5580e2a472cff5d3cc17cf80643dfa78aeee2ca1127b6d51ae7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:26:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:26:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:26:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a621e94fde00d5580e2a472cff5d3cc17cf80643dfa78aeee2ca1127b6d51ae7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:26:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a621e94fde00d5580e2a472cff5d3cc17cf80643dfa78aeee2ca1127b6d51ae7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:26:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a621e94fde00d5580e2a472cff5d3cc17cf80643dfa78aeee2ca1127b6d51ae7"} {"level":"debug","ts":"2026-07-14T20:26:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a621e94fde00d5580e2a472cff5d3cc17cf80643dfa78aeee2ca1127b6d51ae7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:26:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a621e94fde00d5580e2a472cff5d3cc17cf80643dfa78aeee2ca1127b6d51ae7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:26:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a621e94fde00d5580e2a472cff5d3cc17cf80643dfa78aeee2ca1127b6d51ae7"} {"level":"debug","ts":"2026-07-14T20:26:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a621e94fde00d5580e2a472cff5d3cc17cf80643dfa78aeee2ca1127b6d51ae7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:26:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:26:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a621e94fde00d5580e2a472cff5d3cc17cf80643dfa78aeee2ca1127b6d51ae7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:26:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a621e94fde00d5580e2a472cff5d3cc17cf80643dfa78aeee2ca1127b6d51ae7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:26:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a621e94fde00d5580e2a472cff5d3cc17cf80643dfa78aeee2ca1127b6d51ae7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:26:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:26:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:26:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a621e94fde00d5580e2a472cff5d3cc17cf80643dfa78aeee2ca1127b6d51ae7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:26:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a621e94fde00d5580e2a472cff5d3cc17cf80643dfa78aeee2ca1127b6d51ae7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:26:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a621e94fde00d5580e2a472cff5d3cc17cf80643dfa78aeee2ca1127b6d51ae7"} {"level":"debug","ts":"2026-07-14T20:26:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a621e94fde00d5580e2a472cff5d3cc17cf80643dfa78aeee2ca1127b6d51ae7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:26:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a621e94fde00d5580e2a472cff5d3cc17cf80643dfa78aeee2ca1127b6d51ae7"} {"level":"debug","ts":"2026-07-14T20:26:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a621e94fde00d5580e2a472cff5d3cc17cf80643dfa78aeee2ca1127b6d51ae7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:26:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:26:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a621e94fde00d5580e2a472cff5d3cc17cf80643dfa78aeee2ca1127b6d51ae7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:26:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a621e94fde00d5580e2a472cff5d3cc17cf80643dfa78aeee2ca1127b6d51ae7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:26:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a621e94fde00d5580e2a472cff5d3cc17cf80643dfa78aeee2ca1127b6d51ae7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:26:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a621e94fde00d5580e2a472cff5d3cc17cf80643dfa78aeee2ca1127b6d51ae7"} {"level":"debug","ts":"2026-07-14T20:26:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db139fbec380c8cc7d32154fd39330700ee9c020a31c9b5652130cec85a68368","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:26:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:26:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:26:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db139fbec380c8cc7d32154fd39330700ee9c020a31c9b5652130cec85a68368","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:26:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db139fbec380c8cc7d32154fd39330700ee9c020a31c9b5652130cec85a68368","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:26:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:26:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:26:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db139fbec380c8cc7d32154fd39330700ee9c020a31c9b5652130cec85a68368"} {"level":"info","ts":"2026-07-14T20:26:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db139fbec380c8cc7d32154fd39330700ee9c020a31c9b5652130cec85a68368","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:26:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db139fbec380c8cc7d32154fd39330700ee9c020a31c9b5652130cec85a68368","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:26:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:26:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-14T20:26:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"db139fbec380c8cc7d32154fd39330700ee9c020a31c9b5652130cec85a68368","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"db139fbec380c8cc7d32154fd39330700ee9c020a31c9b5652130cec85a68368\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T20:26:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db139fbec380c8cc7d32154fd39330700ee9c020a31c9b5652130cec85a68368","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:26:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db139fbec380c8cc7d32154fd39330700ee9c020a31c9b5652130cec85a68368","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:26:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db139fbec380c8cc7d32154fd39330700ee9c020a31c9b5652130cec85a68368"} {"level":"info","ts":"2026-07-14T20:26:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db139fbec380c8cc7d32154fd39330700ee9c020a31c9b5652130cec85a68368"} {"level":"debug","ts":"2026-07-14T20:26:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db139fbec380c8cc7d32154fd39330700ee9c020a31c9b5652130cec85a68368","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:26:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:26:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db139fbec380c8cc7d32154fd39330700ee9c020a31c9b5652130cec85a68368"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:26:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db139fbec380c8cc7d32154fd39330700ee9c020a31c9b5652130cec85a68368","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:26:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db139fbec380c8cc7d32154fd39330700ee9c020a31c9b5652130cec85a68368","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:26:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:26:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:26:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db139fbec380c8cc7d32154fd39330700ee9c020a31c9b5652130cec85a68368","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:26:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db139fbec380c8cc7d32154fd39330700ee9c020a31c9b5652130cec85a68368","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:26:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db139fbec380c8cc7d32154fd39330700ee9c020a31c9b5652130cec85a68368"} {"level":"debug","ts":"2026-07-14T20:26:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db139fbec380c8cc7d32154fd39330700ee9c020a31c9b5652130cec85a68368","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:26:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db139fbec380c8cc7d32154fd39330700ee9c020a31c9b5652130cec85a68368"} {"level":"debug","ts":"2026-07-14T20:26:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db139fbec380c8cc7d32154fd39330700ee9c020a31c9b5652130cec85a68368","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:26:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:26:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db139fbec380c8cc7d32154fd39330700ee9c020a31c9b5652130cec85a68368"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:26:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db139fbec380c8cc7d32154fd39330700ee9c020a31c9b5652130cec85a68368","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:26:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db139fbec380c8cc7d32154fd39330700ee9c020a31c9b5652130cec85a68368","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:26:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:26:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:26:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db139fbec380c8cc7d32154fd39330700ee9c020a31c9b5652130cec85a68368","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:26:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db139fbec380c8cc7d32154fd39330700ee9c020a31c9b5652130cec85a68368","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:26:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db139fbec380c8cc7d32154fd39330700ee9c020a31c9b5652130cec85a68368","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:26:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db139fbec380c8cc7d32154fd39330700ee9c020a31c9b5652130cec85a68368"} {"level":"debug","ts":"2026-07-14T20:26:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db139fbec380c8cc7d32154fd39330700ee9c020a31c9b5652130cec85a68368","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:26:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db139fbec380c8cc7d32154fd39330700ee9c020a31c9b5652130cec85a68368"} {"level":"debug","ts":"2026-07-14T20:26:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db139fbec380c8cc7d32154fd39330700ee9c020a31c9b5652130cec85a68368","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:26:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:26:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db139fbec380c8cc7d32154fd39330700ee9c020a31c9b5652130cec85a68368"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:26:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db139fbec380c8cc7d32154fd39330700ee9c020a31c9b5652130cec85a68368","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:26:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db139fbec380c8cc7d32154fd39330700ee9c020a31c9b5652130cec85a68368","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:26:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:26:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:26:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db139fbec380c8cc7d32154fd39330700ee9c020a31c9b5652130cec85a68368","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:26:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db139fbec380c8cc7d32154fd39330700ee9c020a31c9b5652130cec85a68368","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:26:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db139fbec380c8cc7d32154fd39330700ee9c020a31c9b5652130cec85a68368","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:26:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db139fbec380c8cc7d32154fd39330700ee9c020a31c9b5652130cec85a68368"} {"level":"debug","ts":"2026-07-14T20:26:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db139fbec380c8cc7d32154fd39330700ee9c020a31c9b5652130cec85a68368","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:26:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db139fbec380c8cc7d32154fd39330700ee9c020a31c9b5652130cec85a68368"} {"level":"debug","ts":"2026-07-14T20:26:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db139fbec380c8cc7d32154fd39330700ee9c020a31c9b5652130cec85a68368","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:26:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:26:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db139fbec380c8cc7d32154fd39330700ee9c020a31c9b5652130cec85a68368"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:26:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db139fbec380c8cc7d32154fd39330700ee9c020a31c9b5652130cec85a68368","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:26:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db139fbec380c8cc7d32154fd39330700ee9c020a31c9b5652130cec85a68368","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:26:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:26:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:26:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db139fbec380c8cc7d32154fd39330700ee9c020a31c9b5652130cec85a68368","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:26:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db139fbec380c8cc7d32154fd39330700ee9c020a31c9b5652130cec85a68368","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:26:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db139fbec380c8cc7d32154fd39330700ee9c020a31c9b5652130cec85a68368","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:26:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db139fbec380c8cc7d32154fd39330700ee9c020a31c9b5652130cec85a68368"} {"level":"debug","ts":"2026-07-14T20:26:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db139fbec380c8cc7d32154fd39330700ee9c020a31c9b5652130cec85a68368","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:26:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db139fbec380c8cc7d32154fd39330700ee9c020a31c9b5652130cec85a68368"} {"level":"debug","ts":"2026-07-14T20:26:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db139fbec380c8cc7d32154fd39330700ee9c020a31c9b5652130cec85a68368","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:26:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:26:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db139fbec380c8cc7d32154fd39330700ee9c020a31c9b5652130cec85a68368"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:26:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db139fbec380c8cc7d32154fd39330700ee9c020a31c9b5652130cec85a68368","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:26:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db139fbec380c8cc7d32154fd39330700ee9c020a31c9b5652130cec85a68368","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:26:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:26:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:26:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db139fbec380c8cc7d32154fd39330700ee9c020a31c9b5652130cec85a68368","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:26:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ecfe0723855c4bf3615f2cd4f20a118c20cee4a28ab2e1509093dc6a61fe594","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:26:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:26:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:26:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db139fbec380c8cc7d32154fd39330700ee9c020a31c9b5652130cec85a68368"} {"level":"info","ts":"2026-07-14T20:26:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ecfe0723855c4bf3615f2cd4f20a118c20cee4a28ab2e1509093dc6a61fe594","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:26:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db139fbec380c8cc7d32154fd39330700ee9c020a31c9b5652130cec85a68368","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:26:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:26:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db139fbec380c8cc7d32154fd39330700ee9c020a31c9b5652130cec85a68368"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:26:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ecfe0723855c4bf3615f2cd4f20a118c20cee4a28ab2e1509093dc6a61fe594"} {"level":"info","ts":"2026-07-14T20:26:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db139fbec380c8cc7d32154fd39330700ee9c020a31c9b5652130cec85a68368","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:26:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ecfe0723855c4bf3615f2cd4f20a118c20cee4a28ab2e1509093dc6a61fe594","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:26:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:26:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ecfe0723855c4bf3615f2cd4f20a118c20cee4a28ab2e1509093dc6a61fe594"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:26:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ecfe0723855c4bf3615f2cd4f20a118c20cee4a28ab2e1509093dc6a61fe594","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:26:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db139fbec380c8cc7d32154fd39330700ee9c020a31c9b5652130cec85a68368","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:26:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:26:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:26:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db139fbec380c8cc7d32154fd39330700ee9c020a31c9b5652130cec85a68368"} {"level":"info","ts":"2026-07-14T20:26:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db139fbec380c8cc7d32154fd39330700ee9c020a31c9b5652130cec85a68368","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:26:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ecfe0723855c4bf3615f2cd4f20a118c20cee4a28ab2e1509093dc6a61fe594","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:26:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:26:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:26:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ecfe0723855c4bf3615f2cd4f20a118c20cee4a28ab2e1509093dc6a61fe594"} {"level":"info","ts":"2026-07-14T20:26:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ecfe0723855c4bf3615f2cd4f20a118c20cee4a28ab2e1509093dc6a61fe594","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:26:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db139fbec380c8cc7d32154fd39330700ee9c020a31c9b5652130cec85a68368","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:26:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ecfe0723855c4bf3615f2cd4f20a118c20cee4a28ab2e1509093dc6a61fe594","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:26:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:26:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ecfe0723855c4bf3615f2cd4f20a118c20cee4a28ab2e1509093dc6a61fe594"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:26:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db139fbec380c8cc7d32154fd39330700ee9c020a31c9b5652130cec85a68368"} {"level":"info","ts":"2026-07-14T20:26:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ecfe0723855c4bf3615f2cd4f20a118c20cee4a28ab2e1509093dc6a61fe594","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:26:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db139fbec380c8cc7d32154fd39330700ee9c020a31c9b5652130cec85a68368","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:26:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:26:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db139fbec380c8cc7d32154fd39330700ee9c020a31c9b5652130cec85a68368"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:26:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db139fbec380c8cc7d32154fd39330700ee9c020a31c9b5652130cec85a68368","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:26:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ecfe0723855c4bf3615f2cd4f20a118c20cee4a28ab2e1509093dc6a61fe594","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:26:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:26:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:26:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ecfe0723855c4bf3615f2cd4f20a118c20cee4a28ab2e1509093dc6a61fe594"} {"level":"info","ts":"2026-07-14T20:26:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ecfe0723855c4bf3615f2cd4f20a118c20cee4a28ab2e1509093dc6a61fe594","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:26:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db139fbec380c8cc7d32154fd39330700ee9c020a31c9b5652130cec85a68368","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:26:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ecfe0723855c4bf3615f2cd4f20a118c20cee4a28ab2e1509093dc6a61fe594","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:26:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ecfe0723855c4bf3615f2cd4f20a118c20cee4a28ab2e1509093dc6a61fe594"} {"level":"debug","ts":"2026-07-14T20:26:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ecfe0723855c4bf3615f2cd4f20a118c20cee4a28ab2e1509093dc6a61fe594","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:26:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:26:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ecfe0723855c4bf3615f2cd4f20a118c20cee4a28ab2e1509093dc6a61fe594"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:26:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ecfe0723855c4bf3615f2cd4f20a118c20cee4a28ab2e1509093dc6a61fe594","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:26:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ecfe0723855c4bf3615f2cd4f20a118c20cee4a28ab2e1509093dc6a61fe594","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:26:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db139fbec380c8cc7d32154fd39330700ee9c020a31c9b5652130cec85a68368"} {"level":"info","ts":"2026-07-14T20:26:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ecfe0723855c4bf3615f2cd4f20a118c20cee4a28ab2e1509093dc6a61fe594"} {"level":"debug","ts":"2026-07-14T20:26:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1b8032d6980d238bbfd03ec7275d9abac854a2f2db003f3b28140b3299cb58b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:26:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:26:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:26:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1b8032d6980d238bbfd03ec7275d9abac854a2f2db003f3b28140b3299cb58b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:26:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1b8032d6980d238bbfd03ec7275d9abac854a2f2db003f3b28140b3299cb58b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:26:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1b8032d6980d238bbfd03ec7275d9abac854a2f2db003f3b28140b3299cb58b"} {"level":"debug","ts":"2026-07-14T20:26:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1b8032d6980d238bbfd03ec7275d9abac854a2f2db003f3b28140b3299cb58b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:26:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1b8032d6980d238bbfd03ec7275d9abac854a2f2db003f3b28140b3299cb58b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:26:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1b8032d6980d238bbfd03ec7275d9abac854a2f2db003f3b28140b3299cb58b"} {"level":"debug","ts":"2026-07-14T20:26:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1b8032d6980d238bbfd03ec7275d9abac854a2f2db003f3b28140b3299cb58b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:26:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:26:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d1b8032d6980d238bbfd03ec7275d9abac854a2f2db003f3b28140b3299cb58b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:26:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1b8032d6980d238bbfd03ec7275d9abac854a2f2db003f3b28140b3299cb58b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:26:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1b8032d6980d238bbfd03ec7275d9abac854a2f2db003f3b28140b3299cb58b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:26:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1b8032d6980d238bbfd03ec7275d9abac854a2f2db003f3b28140b3299cb58b"} {"level":"debug","ts":"2026-07-14T20:26:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c29396c245f70b5c749d303d18dd9b8546c1142241ed5ba58c2bea431af23552","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:26:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:26:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:26:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c29396c245f70b5c749d303d18dd9b8546c1142241ed5ba58c2bea431af23552","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:26:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c29396c245f70b5c749d303d18dd9b8546c1142241ed5ba58c2bea431af23552","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:26:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c29396c245f70b5c749d303d18dd9b8546c1142241ed5ba58c2bea431af23552"} {"level":"debug","ts":"2026-07-14T20:26:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c29396c245f70b5c749d303d18dd9b8546c1142241ed5ba58c2bea431af23552","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:26:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c29396c245f70b5c749d303d18dd9b8546c1142241ed5ba58c2bea431af23552"} {"level":"debug","ts":"2026-07-14T20:26:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c29396c245f70b5c749d303d18dd9b8546c1142241ed5ba58c2bea431af23552","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:26:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:26:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c29396c245f70b5c749d303d18dd9b8546c1142241ed5ba58c2bea431af23552"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:26:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c29396c245f70b5c749d303d18dd9b8546c1142241ed5ba58c2bea431af23552","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:26:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c29396c245f70b5c749d303d18dd9b8546c1142241ed5ba58c2bea431af23552","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:26:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c29396c245f70b5c749d303d18dd9b8546c1142241ed5ba58c2bea431af23552"} {"level":"debug","ts":"2026-07-14T20:26:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c13cb999f540a85cc0a9b45a3aef54bcf27d670c3afc49ee0ae95fb9cee0f5cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:26:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:26:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:26:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c13cb999f540a85cc0a9b45a3aef54bcf27d670c3afc49ee0ae95fb9cee0f5cc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:26:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c550c519aa2c8212b5d633772ee32c4726a2caf5dda7735a74a1dde21b30adff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:26:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:26:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:26:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c13cb999f540a85cc0a9b45a3aef54bcf27d670c3afc49ee0ae95fb9cee0f5cc"} {"level":"info","ts":"2026-07-14T20:26:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c550c519aa2c8212b5d633772ee32c4726a2caf5dda7735a74a1dde21b30adff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:26:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c13cb999f540a85cc0a9b45a3aef54bcf27d670c3afc49ee0ae95fb9cee0f5cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:26:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:26:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c13cb999f540a85cc0a9b45a3aef54bcf27d670c3afc49ee0ae95fb9cee0f5cc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:26:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c550c519aa2c8212b5d633772ee32c4726a2caf5dda7735a74a1dde21b30adff"} {"level":"info","ts":"2026-07-14T20:26:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c13cb999f540a85cc0a9b45a3aef54bcf27d670c3afc49ee0ae95fb9cee0f5cc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:26:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c550c519aa2c8212b5d633772ee32c4726a2caf5dda7735a74a1dde21b30adff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:26:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:26:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c550c519aa2c8212b5d633772ee32c4726a2caf5dda7735a74a1dde21b30adff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:26:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c550c519aa2c8212b5d633772ee32c4726a2caf5dda7735a74a1dde21b30adff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:26:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c13cb999f540a85cc0a9b45a3aef54bcf27d670c3afc49ee0ae95fb9cee0f5cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:26:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:26:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:26:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c13cb999f540a85cc0a9b45a3aef54bcf27d670c3afc49ee0ae95fb9cee0f5cc"} {"level":"info","ts":"2026-07-14T20:26:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c13cb999f540a85cc0a9b45a3aef54bcf27d670c3afc49ee0ae95fb9cee0f5cc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:26:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c550c519aa2c8212b5d633772ee32c4726a2caf5dda7735a74a1dde21b30adff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:26:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:26:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:26:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c550c519aa2c8212b5d633772ee32c4726a2caf5dda7735a74a1dde21b30adff"} {"level":"info","ts":"2026-07-14T20:26:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c550c519aa2c8212b5d633772ee32c4726a2caf5dda7735a74a1dde21b30adff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:26:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c13cb999f540a85cc0a9b45a3aef54bcf27d670c3afc49ee0ae95fb9cee0f5cc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:26:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c550c519aa2c8212b5d633772ee32c4726a2caf5dda7735a74a1dde21b30adff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:26:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:26:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c550c519aa2c8212b5d633772ee32c4726a2caf5dda7735a74a1dde21b30adff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:26:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c13cb999f540a85cc0a9b45a3aef54bcf27d670c3afc49ee0ae95fb9cee0f5cc"} {"level":"info","ts":"2026-07-14T20:26:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c550c519aa2c8212b5d633772ee32c4726a2caf5dda7735a74a1dde21b30adff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:26:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c13cb999f540a85cc0a9b45a3aef54bcf27d670c3afc49ee0ae95fb9cee0f5cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:26:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:26:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c13cb999f540a85cc0a9b45a3aef54bcf27d670c3afc49ee0ae95fb9cee0f5cc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c13cb999f540a85cc0a9b45a3aef54bcf27d670c3afc49ee0ae95fb9cee0f5cc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c550c519aa2c8212b5d633772ee32c4726a2caf5dda7735a74a1dde21b30adff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:26:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:26:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c550c519aa2c8212b5d633772ee32c4726a2caf5dda7735a74a1dde21b30adff"} {"level":"info","ts":"2026-07-14T20:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c550c519aa2c8212b5d633772ee32c4726a2caf5dda7735a74a1dde21b30adff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00b07e527b7d2acf37bbb66b06bfe2ffa02131122ff5b9d3a2ad293273d971cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:26:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:26:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00b07e527b7d2acf37bbb66b06bfe2ffa02131122ff5b9d3a2ad293273d971cb"} {"level":"info","ts":"2026-07-14T20:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00b07e527b7d2acf37bbb66b06bfe2ffa02131122ff5b9d3a2ad293273d971cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c13cb999f540a85cc0a9b45a3aef54bcf27d670c3afc49ee0ae95fb9cee0f5cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:26:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:26:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c13cb999f540a85cc0a9b45a3aef54bcf27d670c3afc49ee0ae95fb9cee0f5cc"} {"level":"info","ts":"2026-07-14T20:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c13cb999f540a85cc0a9b45a3aef54bcf27d670c3afc49ee0ae95fb9cee0f5cc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c550c519aa2c8212b5d633772ee32c4726a2caf5dda7735a74a1dde21b30adff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00b07e527b7d2acf37bbb66b06bfe2ffa02131122ff5b9d3a2ad293273d971cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:26:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:26:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["00b07e527b7d2acf37bbb66b06bfe2ffa02131122ff5b9d3a2ad293273d971cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c550c519aa2c8212b5d633772ee32c4726a2caf5dda7735a74a1dde21b30adff"} {"level":"info","ts":"2026-07-14T20:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00b07e527b7d2acf37bbb66b06bfe2ffa02131122ff5b9d3a2ad293273d971cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c13cb999f540a85cc0a9b45a3aef54bcf27d670c3afc49ee0ae95fb9cee0f5cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:26:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:26:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c13cb999f540a85cc0a9b45a3aef54bcf27d670c3afc49ee0ae95fb9cee0f5cc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00b07e527b7d2acf37bbb66b06bfe2ffa02131122ff5b9d3a2ad293273d971cb"} {"level":"info","ts":"2026-07-14T20:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c13cb999f540a85cc0a9b45a3aef54bcf27d670c3afc49ee0ae95fb9cee0f5cc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c550c519aa2c8212b5d633772ee32c4726a2caf5dda7735a74a1dde21b30adff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:26:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:26:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c550c519aa2c8212b5d633772ee32c4726a2caf5dda7735a74a1dde21b30adff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c13cb999f540a85cc0a9b45a3aef54bcf27d670c3afc49ee0ae95fb9cee0f5cc"} {"level":"info","ts":"2026-07-14T20:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c550c519aa2c8212b5d633772ee32c4726a2caf5dda7735a74a1dde21b30adff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00b07e527b7d2acf37bbb66b06bfe2ffa02131122ff5b9d3a2ad293273d971cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:26:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:26:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00b07e527b7d2acf37bbb66b06bfe2ffa02131122ff5b9d3a2ad293273d971cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c13cb999f540a85cc0a9b45a3aef54bcf27d670c3afc49ee0ae95fb9cee0f5cc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c550c519aa2c8212b5d633772ee32c4726a2caf5dda7735a74a1dde21b30adff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00b07e527b7d2acf37bbb66b06bfe2ffa02131122ff5b9d3a2ad293273d971cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00b07e527b7d2acf37bbb66b06bfe2ffa02131122ff5b9d3a2ad293273d971cb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00b07e527b7d2acf37bbb66b06bfe2ffa02131122ff5b9d3a2ad293273d971cb"} {"level":"debug","ts":"2026-07-14T20:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00b07e527b7d2acf37bbb66b06bfe2ffa02131122ff5b9d3a2ad293273d971cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:26:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:26:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["00b07e527b7d2acf37bbb66b06bfe2ffa02131122ff5b9d3a2ad293273d971cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00b07e527b7d2acf37bbb66b06bfe2ffa02131122ff5b9d3a2ad293273d971cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6377c4ef2594a1d85536d259240266a16e018edc77e2d6aa57c01f878b968e01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:26:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:26:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c13cb999f540a85cc0a9b45a3aef54bcf27d670c3afc49ee0ae95fb9cee0f5cc"} {"level":"info","ts":"2026-07-14T20:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6377c4ef2594a1d85536d259240266a16e018edc77e2d6aa57c01f878b968e01","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00b07e527b7d2acf37bbb66b06bfe2ffa02131122ff5b9d3a2ad293273d971cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6377c4ef2594a1d85536d259240266a16e018edc77e2d6aa57c01f878b968e01","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6377c4ef2594a1d85536d259240266a16e018edc77e2d6aa57c01f878b968e01","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c550c519aa2c8212b5d633772ee32c4726a2caf5dda7735a74a1dde21b30adff"} {"level":"debug","ts":"2026-07-14T20:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6377c4ef2594a1d85536d259240266a16e018edc77e2d6aa57c01f878b968e01","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00b07e527b7d2acf37bbb66b06bfe2ffa02131122ff5b9d3a2ad293273d971cb"} {"level":"info","ts":"2026-07-14T20:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6377c4ef2594a1d85536d259240266a16e018edc77e2d6aa57c01f878b968e01"} {"level":"debug","ts":"2026-07-14T20:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6377c4ef2594a1d85536d259240266a16e018edc77e2d6aa57c01f878b968e01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:26:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:26:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6377c4ef2594a1d85536d259240266a16e018edc77e2d6aa57c01f878b968e01"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6377c4ef2594a1d85536d259240266a16e018edc77e2d6aa57c01f878b968e01","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6377c4ef2594a1d85536d259240266a16e018edc77e2d6aa57c01f878b968e01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:26:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:26:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6377c4ef2594a1d85536d259240266a16e018edc77e2d6aa57c01f878b968e01","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6377c4ef2594a1d85536d259240266a16e018edc77e2d6aa57c01f878b968e01","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6377c4ef2594a1d85536d259240266a16e018edc77e2d6aa57c01f878b968e01","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6377c4ef2594a1d85536d259240266a16e018edc77e2d6aa57c01f878b968e01"} {"level":"info","ts":"2026-07-14T20:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6377c4ef2594a1d85536d259240266a16e018edc77e2d6aa57c01f878b968e01"} {"level":"debug","ts":"2026-07-14T20:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6377c4ef2594a1d85536d259240266a16e018edc77e2d6aa57c01f878b968e01","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6377c4ef2594a1d85536d259240266a16e018edc77e2d6aa57c01f878b968e01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:26:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:26:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6377c4ef2594a1d85536d259240266a16e018edc77e2d6aa57c01f878b968e01"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6377c4ef2594a1d85536d259240266a16e018edc77e2d6aa57c01f878b968e01","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6377c4ef2594a1d85536d259240266a16e018edc77e2d6aa57c01f878b968e01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:26:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:26:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6377c4ef2594a1d85536d259240266a16e018edc77e2d6aa57c01f878b968e01","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6377c4ef2594a1d85536d259240266a16e018edc77e2d6aa57c01f878b968e01","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6377c4ef2594a1d85536d259240266a16e018edc77e2d6aa57c01f878b968e01","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6377c4ef2594a1d85536d259240266a16e018edc77e2d6aa57c01f878b968e01"} {"level":"debug","ts":"2026-07-14T20:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6377c4ef2594a1d85536d259240266a16e018edc77e2d6aa57c01f878b968e01","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6377c4ef2594a1d85536d259240266a16e018edc77e2d6aa57c01f878b968e01"} {"level":"debug","ts":"2026-07-14T20:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6377c4ef2594a1d85536d259240266a16e018edc77e2d6aa57c01f878b968e01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:26:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:26:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6377c4ef2594a1d85536d259240266a16e018edc77e2d6aa57c01f878b968e01"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6377c4ef2594a1d85536d259240266a16e018edc77e2d6aa57c01f878b968e01","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6377c4ef2594a1d85536d259240266a16e018edc77e2d6aa57c01f878b968e01","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6377c4ef2594a1d85536d259240266a16e018edc77e2d6aa57c01f878b968e01"} {"level":"debug","ts":"2026-07-14T20:27:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6f2248de1ab1ef405c3d1f9f94f30e6863f415d866cb453b4a13c085df9e42e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:27:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:27:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:27:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6f2248de1ab1ef405c3d1f9f94f30e6863f415d866cb453b4a13c085df9e42e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:27:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6f2248de1ab1ef405c3d1f9f94f30e6863f415d866cb453b4a13c085df9e42e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:27:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6f2248de1ab1ef405c3d1f9f94f30e6863f415d866cb453b4a13c085df9e42e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:27:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6f2248de1ab1ef405c3d1f9f94f30e6863f415d866cb453b4a13c085df9e42e"} {"level":"debug","ts":"2026-07-14T20:27:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6f2248de1ab1ef405c3d1f9f94f30e6863f415d866cb453b4a13c085df9e42e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:27:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6f2248de1ab1ef405c3d1f9f94f30e6863f415d866cb453b4a13c085df9e42e"} {"level":"debug","ts":"2026-07-14T20:27:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6f2248de1ab1ef405c3d1f9f94f30e6863f415d866cb453b4a13c085df9e42e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:27:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:27:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b6f2248de1ab1ef405c3d1f9f94f30e6863f415d866cb453b4a13c085df9e42e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:27:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6f2248de1ab1ef405c3d1f9f94f30e6863f415d866cb453b4a13c085df9e42e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:27:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6f2248de1ab1ef405c3d1f9f94f30e6863f415d866cb453b4a13c085df9e42e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6f2248de1ab1ef405c3d1f9f94f30e6863f415d866cb453b4a13c085df9e42e"} {"level":"debug","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:27:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:27:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd"} {"level":"debug","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd"} {"level":"debug","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:27:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:27:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:27:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:27:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd"} {"level":"debug","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd"} {"level":"debug","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:27:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:27:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:27:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:27:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00b07e527b7d2acf37bbb66b06bfe2ffa02131122ff5b9d3a2ad293273d971cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd"} {"level":"debug","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:27:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:27:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00b07e527b7d2acf37bbb66b06bfe2ffa02131122ff5b9d3a2ad293273d971cb"} {"level":"info","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:27:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:27:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd"} {"level":"info","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd"} {"level":"debug","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd"} {"level":"debug","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c28b37ed679c5b23f59474eb4c452cbeaa570eb67fa3779e7aac7c34b6b82c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:27:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:27:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c28b37ed679c5b23f59474eb4c452cbeaa570eb67fa3779e7aac7c34b6b82c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c28b37ed679c5b23f59474eb4c452cbeaa570eb67fa3779e7aac7c34b6b82c5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c28b37ed679c5b23f59474eb4c452cbeaa570eb67fa3779e7aac7c34b6b82c5"} {"level":"debug","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c28b37ed679c5b23f59474eb4c452cbeaa570eb67fa3779e7aac7c34b6b82c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:27:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:27:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c28b37ed679c5b23f59474eb4c452cbeaa570eb67fa3779e7aac7c34b6b82c5"} {"level":"info","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c28b37ed679c5b23f59474eb4c452cbeaa570eb67fa3779e7aac7c34b6b82c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:27:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:27:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8c28b37ed679c5b23f59474eb4c452cbeaa570eb67fa3779e7aac7c34b6b82c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c28b37ed679c5b23f59474eb4c452cbeaa570eb67fa3779e7aac7c34b6b82c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:27:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:27:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd"} {"level":"info","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c28b37ed679c5b23f59474eb4c452cbeaa570eb67fa3779e7aac7c34b6b82c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:27:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:27:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c28b37ed679c5b23f59474eb4c452cbeaa570eb67fa3779e7aac7c34b6b82c5"} {"level":"info","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c28b37ed679c5b23f59474eb4c452cbeaa570eb67fa3779e7aac7c34b6b82c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a5f1a7a4b5b713c9ca3e43cf9562cd702115c5a182e40862afb54235f76a4cc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c28b37ed679c5b23f59474eb4c452cbeaa570eb67fa3779e7aac7c34b6b82c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:27:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:27:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8c28b37ed679c5b23f59474eb4c452cbeaa570eb67fa3779e7aac7c34b6b82c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd"} {"level":"info","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c28b37ed679c5b23f59474eb4c452cbeaa570eb67fa3779e7aac7c34b6b82c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:27:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:27:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a5f1a7a4b5b713c9ca3e43cf9562cd702115c5a182e40862afb54235f76a4cc"} {"level":"info","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c28b37ed679c5b23f59474eb4c452cbeaa570eb67fa3779e7aac7c34b6b82c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:27:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:27:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c28b37ed679c5b23f59474eb4c452cbeaa570eb67fa3779e7aac7c34b6b82c5"} {"level":"info","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c28b37ed679c5b23f59474eb4c452cbeaa570eb67fa3779e7aac7c34b6b82c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:27:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:27:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd"} {"level":"info","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c28b37ed679c5b23f59474eb4c452cbeaa570eb67fa3779e7aac7c34b6b82c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:27:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:27:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c28b37ed679c5b23f59474eb4c452cbeaa570eb67fa3779e7aac7c34b6b82c5"} {"level":"info","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c28b37ed679c5b23f59474eb4c452cbeaa570eb67fa3779e7aac7c34b6b82c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:27:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:27:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8c28b37ed679c5b23f59474eb4c452cbeaa570eb67fa3779e7aac7c34b6b82c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c28b37ed679c5b23f59474eb4c452cbeaa570eb67fa3779e7aac7c34b6b82c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:27:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:27:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd"} {"level":"info","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae277ecbc8c578edfe4f058b16407d98618208bc9007af82891c1c45fb9f5693","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:27:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:27:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae277ecbc8c578edfe4f058b16407d98618208bc9007af82891c1c45fb9f5693"} {"level":"info","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae277ecbc8c578edfe4f058b16407d98618208bc9007af82891c1c45fb9f5693","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c28b37ed679c5b23f59474eb4c452cbeaa570eb67fa3779e7aac7c34b6b82c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:27:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:27:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c28b37ed679c5b23f59474eb4c452cbeaa570eb67fa3779e7aac7c34b6b82c5"} {"level":"info","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c28b37ed679c5b23f59474eb4c452cbeaa570eb67fa3779e7aac7c34b6b82c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae277ecbc8c578edfe4f058b16407d98618208bc9007af82891c1c45fb9f5693","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:27:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:27:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ae277ecbc8c578edfe4f058b16407d98618208bc9007af82891c1c45fb9f5693"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae277ecbc8c578edfe4f058b16407d98618208bc9007af82891c1c45fb9f5693","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c28b37ed679c5b23f59474eb4c452cbeaa570eb67fa3779e7aac7c34b6b82c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:27:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:27:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8c28b37ed679c5b23f59474eb4c452cbeaa570eb67fa3779e7aac7c34b6b82c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd"} {"level":"info","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c28b37ed679c5b23f59474eb4c452cbeaa570eb67fa3779e7aac7c34b6b82c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:27:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:27:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae277ecbc8c578edfe4f058b16407d98618208bc9007af82891c1c45fb9f5693"} {"level":"info","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae277ecbc8c578edfe4f058b16407d98618208bc9007af82891c1c45fb9f5693","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c28b37ed679c5b23f59474eb4c452cbeaa570eb67fa3779e7aac7c34b6b82c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:27:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:27:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c28b37ed679c5b23f59474eb4c452cbeaa570eb67fa3779e7aac7c34b6b82c5"} {"level":"info","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c28b37ed679c5b23f59474eb4c452cbeaa570eb67fa3779e7aac7c34b6b82c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97590f5cd28ec35ed98f78ac959e5d16f8e7df75ca6a5d12abd046201c08d912","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:27:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:27:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97590f5cd28ec35ed98f78ac959e5d16f8e7df75ca6a5d12abd046201c08d912","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c28b37ed679c5b23f59474eb4c452cbeaa570eb67fa3779e7aac7c34b6b82c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:27:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:27:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8c28b37ed679c5b23f59474eb4c452cbeaa570eb67fa3779e7aac7c34b6b82c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97590f5cd28ec35ed98f78ac959e5d16f8e7df75ca6a5d12abd046201c08d912"} {"level":"info","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c28b37ed679c5b23f59474eb4c452cbeaa570eb67fa3779e7aac7c34b6b82c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97590f5cd28ec35ed98f78ac959e5d16f8e7df75ca6a5d12abd046201c08d912","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:27:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:27:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["97590f5cd28ec35ed98f78ac959e5d16f8e7df75ca6a5d12abd046201c08d912"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd"} {"level":"info","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97590f5cd28ec35ed98f78ac959e5d16f8e7df75ca6a5d12abd046201c08d912","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c28b37ed679c5b23f59474eb4c452cbeaa570eb67fa3779e7aac7c34b6b82c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:27:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:27:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c28b37ed679c5b23f59474eb4c452cbeaa570eb67fa3779e7aac7c34b6b82c5"} {"level":"info","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c28b37ed679c5b23f59474eb4c452cbeaa570eb67fa3779e7aac7c34b6b82c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97590f5cd28ec35ed98f78ac959e5d16f8e7df75ca6a5d12abd046201c08d912","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:27:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:27:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97590f5cd28ec35ed98f78ac959e5d16f8e7df75ca6a5d12abd046201c08d912","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c28b37ed679c5b23f59474eb4c452cbeaa570eb67fa3779e7aac7c34b6b82c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:27:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:27:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8c28b37ed679c5b23f59474eb4c452cbeaa570eb67fa3779e7aac7c34b6b82c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97590f5cd28ec35ed98f78ac959e5d16f8e7df75ca6a5d12abd046201c08d912"} {"level":"info","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c28b37ed679c5b23f59474eb4c452cbeaa570eb67fa3779e7aac7c34b6b82c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"850c6f9b19f2e6867c79d7d9d65046a38257222772e1ba471177620d907bc3db","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97590f5cd28ec35ed98f78ac959e5d16f8e7df75ca6a5d12abd046201c08d912","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:27:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:27:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["97590f5cd28ec35ed98f78ac959e5d16f8e7df75ca6a5d12abd046201c08d912"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c28b37ed679c5b23f59474eb4c452cbeaa570eb67fa3779e7aac7c34b6b82c5"} {"level":"info","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97590f5cd28ec35ed98f78ac959e5d16f8e7df75ca6a5d12abd046201c08d912","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c28b37ed679c5b23f59474eb4c452cbeaa570eb67fa3779e7aac7c34b6b82c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97590f5cd28ec35ed98f78ac959e5d16f8e7df75ca6a5d12abd046201c08d912","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/850c6f9b19f2e6867c79d7d9d65046a38257222772e1ba471177620d907bc3db"} {"level":"info","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97590f5cd28ec35ed98f78ac959e5d16f8e7df75ca6a5d12abd046201c08d912"} {"level":"debug","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c13cb999f540a85cc0a9b45a3aef54bcf27d670c3afc49ee0ae95fb9cee0f5cc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c28b37ed679c5b23f59474eb4c452cbeaa570eb67fa3779e7aac7c34b6b82c5"} {"level":"info","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c13cb999f540a85cc0a9b45a3aef54bcf27d670c3afc49ee0ae95fb9cee0f5cc"} {"level":"debug","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db139fbec380c8cc7d32154fd39330700ee9c020a31c9b5652130cec85a68368","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:27:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:27:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db139fbec380c8cc7d32154fd39330700ee9c020a31c9b5652130cec85a68368","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db139fbec380c8cc7d32154fd39330700ee9c020a31c9b5652130cec85a68368","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db139fbec380c8cc7d32154fd39330700ee9c020a31c9b5652130cec85a68368","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db139fbec380c8cc7d32154fd39330700ee9c020a31c9b5652130cec85a68368"} {"level":"debug","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db139fbec380c8cc7d32154fd39330700ee9c020a31c9b5652130cec85a68368","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db139fbec380c8cc7d32154fd39330700ee9c020a31c9b5652130cec85a68368"} {"level":"debug","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db139fbec380c8cc7d32154fd39330700ee9c020a31c9b5652130cec85a68368","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:27:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:27:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db139fbec380c8cc7d32154fd39330700ee9c020a31c9b5652130cec85a68368"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db139fbec380c8cc7d32154fd39330700ee9c020a31c9b5652130cec85a68368","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"570326af879efadf5a2a64fb1c07473224d090176f66c70a74ff7f76a2d2de28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:27:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:27:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"570326af879efadf5a2a64fb1c07473224d090176f66c70a74ff7f76a2d2de28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db139fbec380c8cc7d32154fd39330700ee9c020a31c9b5652130cec85a68368","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"570326af879efadf5a2a64fb1c07473224d090176f66c70a74ff7f76a2d2de28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c29396c245f70b5c749d303d18dd9b8546c1142241ed5ba58c2bea431af23552","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"570326af879efadf5a2a64fb1c07473224d090176f66c70a74ff7f76a2d2de28","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/570326af879efadf5a2a64fb1c07473224d090176f66c70a74ff7f76a2d2de28"} {"level":"debug","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"570326af879efadf5a2a64fb1c07473224d090176f66c70a74ff7f76a2d2de28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:27:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:27:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["570326af879efadf5a2a64fb1c07473224d090176f66c70a74ff7f76a2d2de28"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db139fbec380c8cc7d32154fd39330700ee9c020a31c9b5652130cec85a68368"} {"level":"info","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"570326af879efadf5a2a64fb1c07473224d090176f66c70a74ff7f76a2d2de28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"570326af879efadf5a2a64fb1c07473224d090176f66c70a74ff7f76a2d2de28","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c29396c245f70b5c749d303d18dd9b8546c1142241ed5ba58c2bea431af23552"} {"level":"info","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/570326af879efadf5a2a64fb1c07473224d090176f66c70a74ff7f76a2d2de28"} {"level":"debug","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4fef5f539b37e4ed510c125799947d892a376acd90ebba131ba48acc58ad39f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:27:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:27:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4fef5f539b37e4ed510c125799947d892a376acd90ebba131ba48acc58ad39f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4fef5f539b37e4ed510c125799947d892a376acd90ebba131ba48acc58ad39f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6377c4ef2594a1d85536d259240266a16e018edc77e2d6aa57c01f878b968e01","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4fef5f539b37e4ed510c125799947d892a376acd90ebba131ba48acc58ad39f1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4fef5f539b37e4ed510c125799947d892a376acd90ebba131ba48acc58ad39f1"} {"level":"debug","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cbfa9dd5bf131c862db8cc4af053a3ae56f7ae1be83edce9e8cdede1ab5526f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4fef5f539b37e4ed510c125799947d892a376acd90ebba131ba48acc58ad39f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:27:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:27:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4fef5f539b37e4ed510c125799947d892a376acd90ebba131ba48acc58ad39f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6377c4ef2594a1d85536d259240266a16e018edc77e2d6aa57c01f878b968e01"} {"level":"info","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4fef5f539b37e4ed510c125799947d892a376acd90ebba131ba48acc58ad39f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4fef5f539b37e4ed510c125799947d892a376acd90ebba131ba48acc58ad39f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:27:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:27:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4fef5f539b37e4ed510c125799947d892a376acd90ebba131ba48acc58ad39f1"} {"level":"info","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4fef5f539b37e4ed510c125799947d892a376acd90ebba131ba48acc58ad39f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4fef5f539b37e4ed510c125799947d892a376acd90ebba131ba48acc58ad39f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:27:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:27:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4fef5f539b37e4ed510c125799947d892a376acd90ebba131ba48acc58ad39f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cbfa9dd5bf131c862db8cc4af053a3ae56f7ae1be83edce9e8cdede1ab5526f0"} {"level":"info","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4fef5f539b37e4ed510c125799947d892a376acd90ebba131ba48acc58ad39f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4fef5f539b37e4ed510c125799947d892a376acd90ebba131ba48acc58ad39f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4fef5f539b37e4ed510c125799947d892a376acd90ebba131ba48acc58ad39f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:27:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:27:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4fef5f539b37e4ed510c125799947d892a376acd90ebba131ba48acc58ad39f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c550c519aa2c8212b5d633772ee32c4726a2caf5dda7735a74a1dde21b30adff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4fef5f539b37e4ed510c125799947d892a376acd90ebba131ba48acc58ad39f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:27:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:27:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4fef5f539b37e4ed510c125799947d892a376acd90ebba131ba48acc58ad39f1"} {"level":"error","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4fef5f539b37e4ed510c125799947d892a376acd90ebba131ba48acc58ad39f1","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4fef5f539b37e4ed510c125799947d892a376acd90ebba131ba48acc58ad39f1\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4fef5f539b37e4ed510c125799947d892a376acd90ebba131ba48acc58ad39f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:27:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:27:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4fef5f539b37e4ed510c125799947d892a376acd90ebba131ba48acc58ad39f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c550c519aa2c8212b5d633772ee32c4726a2caf5dda7735a74a1dde21b30adff"} {"level":"info","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4fef5f539b37e4ed510c125799947d892a376acd90ebba131ba48acc58ad39f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3068e2153b64b51eb3ef81ac4bfe59c2985a5fd92a636b18321da620b2776fdc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4fef5f539b37e4ed510c125799947d892a376acd90ebba131ba48acc58ad39f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:27:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:27:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4fef5f539b37e4ed510c125799947d892a376acd90ebba131ba48acc58ad39f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1b8032d6980d238bbfd03ec7275d9abac854a2f2db003f3b28140b3299cb58b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4fef5f539b37e4ed510c125799947d892a376acd90ebba131ba48acc58ad39f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:27:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:27:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4fef5f539b37e4ed510c125799947d892a376acd90ebba131ba48acc58ad39f1"} {"level":"error","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4fef5f539b37e4ed510c125799947d892a376acd90ebba131ba48acc58ad39f1","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4fef5f539b37e4ed510c125799947d892a376acd90ebba131ba48acc58ad39f1\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a2038c67495b7cae4a744546f2212afd3463b916b7f7aaeb29cba469857bfabe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4fef5f539b37e4ed510c125799947d892a376acd90ebba131ba48acc58ad39f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:27:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:27:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4fef5f539b37e4ed510c125799947d892a376acd90ebba131ba48acc58ad39f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4fef5f539b37e4ed510c125799947d892a376acd90ebba131ba48acc58ad39f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4fef5f539b37e4ed510c125799947d892a376acd90ebba131ba48acc58ad39f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:27:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:27:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4fef5f539b37e4ed510c125799947d892a376acd90ebba131ba48acc58ad39f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3068e2153b64b51eb3ef81ac4bfe59c2985a5fd92a636b18321da620b2776fdc"} {"level":"error","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4fef5f539b37e4ed510c125799947d892a376acd90ebba131ba48acc58ad39f1","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4fef5f539b37e4ed510c125799947d892a376acd90ebba131ba48acc58ad39f1\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4fef5f539b37e4ed510c125799947d892a376acd90ebba131ba48acc58ad39f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4fef5f539b37e4ed510c125799947d892a376acd90ebba131ba48acc58ad39f1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1b8032d6980d238bbfd03ec7275d9abac854a2f2db003f3b28140b3299cb58b"} {"level":"debug","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c9b65c949e1d48a6b1cfa1a7568066a47ced899e0af888985cf621659bb51ad","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2038c67495b7cae4a744546f2212afd3463b916b7f7aaeb29cba469857bfabe"} {"level":"debug","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f507079541e8389d6122335071e7f9d21cb19719105f1c9e0325d0941f7e5b8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4fef5f539b37e4ed510c125799947d892a376acd90ebba131ba48acc58ad39f1"} {"level":"debug","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a621e94fde00d5580e2a472cff5d3cc17cf80643dfa78aeee2ca1127b6d51ae7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c9b65c949e1d48a6b1cfa1a7568066a47ced899e0af888985cf621659bb51ad"} {"level":"debug","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9fbd0307114c9cbaad76ac7a8dfa807ad766fe8de6b44a13912bd7c27af06c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ecfe0723855c4bf3615f2cd4f20a118c20cee4a28ab2e1509093dc6a61fe594","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f507079541e8389d6122335071e7f9d21cb19719105f1c9e0325d0941f7e5b8"} {"level":"info","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a621e94fde00d5580e2a472cff5d3cc17cf80643dfa78aeee2ca1127b6d51ae7"} {"level":"info","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9fbd0307114c9cbaad76ac7a8dfa807ad766fe8de6b44a13912bd7c27af06c0"} {"level":"info","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ecfe0723855c4bf3615f2cd4f20a118c20cee4a28ab2e1509093dc6a61fe594"} {"level":"info","ts":"2026-07-14T20:27:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"99a8d2af-406a-401e-9485-cacd98d715cd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:37338","PortSpecifier":{"PortValue":37338}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"99a8d2af-406a-401e-9485-cacd98d715cd","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-76db83.apps.f432e014-de42-4e5c-8c87-f51ff4616134.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T20:27:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"99a8d2af-406a-401e-9485-cacd98d715cd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:37338","PortSpecifier":{"PortValue":37338}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784060831,"nanos":407837471},"http":{"id":"99a8d2af-406a-401e-9485-cacd98d715cd","method":"POST","headers":{":authority":"e2e-shared-a-76db83.apps.f432e014-de42-4e5c-8c87-f51ff4616134.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T20:27:11Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"99a8d2af-406a-401e-9485-cacd98d715cd","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T20:27:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"99a8d2af-406a-401e-9485-cacd98d715cd","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"49ca3997-2250-49c1-a4df-f91ee4d9d217","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=10e4cf38-4c6b-49fd-94e4-421e73bde9fc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f51ff4616134"]}} {"level":"debug","ts":"2026-07-14T20:27:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"99a8d2af-406a-401e-9485-cacd98d715cd","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f51ff4616134"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=10e4cf38-4c6b-49fd-94e4-421e73bde9fc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"49ca3997-2250-49c1-a4df-f91ee4d9d217","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4fef5f539b37e4ed510c125799947d892a376acd90ebba131ba48acc58ad39f1"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-76db83.apps.f432e014-de42-4e5c-8c87-f51ff4616134.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T20:27:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"99a8d2af-406a-401e-9485-cacd98d715cd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T20:27:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"99a8d2af-406a-401e-9485-cacd98d715cd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T20:27:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"99a8d2af-406a-401e-9485-cacd98d715cd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-76db83/rate-test-model-76db83\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-76db83/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T20:27:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"99a8d2af-406a-401e-9485-cacd98d715cd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T20:27:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"99a8d2af-406a-401e-9485-cacd98d715cd","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T20:27:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"99a8d2af-406a-401e-9485-cacd98d715cd","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T20:27:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"99a8d2af-406a-401e-9485-cacd98d715cd","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T20:27:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"99a8d2af-406a-401e-9485-cacd98d715cd","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T20:27:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0bbdeb34-ad13-4f85-88d3-e11357ad0e7b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:43072","PortSpecifier":{"PortValue":43072}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0bbdeb34-ad13-4f85-88d3-e11357ad0e7b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-ecc78d.apps.f432e014-de42-4e5c-8c87-f51ff4616134.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T20:27:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0bbdeb34-ad13-4f85-88d3-e11357ad0e7b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:43072","PortSpecifier":{"PortValue":43072}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784060831,"nanos":454196177},"http":{"id":"0bbdeb34-ad13-4f85-88d3-e11357ad0e7b","method":"POST","headers":{":authority":"e2e-shared-b-ecc78d.apps.f432e014-de42-4e5c-8c87-f51ff4616134.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T20:27:11Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0bbdeb34-ad13-4f85-88d3-e11357ad0e7b","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T20:27:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0bbdeb34-ad13-4f85-88d3-e11357ad0e7b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"49ca3997-2250-49c1-a4df-f91ee4d9d217","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=10e4cf38-4c6b-49fd-94e4-421e73bde9fc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f51ff4616134"]}} {"level":"debug","ts":"2026-07-14T20:27:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0bbdeb34-ad13-4f85-88d3-e11357ad0e7b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f51ff4616134"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=10e4cf38-4c6b-49fd-94e4-421e73bde9fc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"49ca3997-2250-49c1-a4df-f91ee4d9d217","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"850c6f9b19f2e6867c79d7d9d65046a38257222772e1ba471177620d907bc3db"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-ecc78d.apps.f432e014-de42-4e5c-8c87-f51ff4616134.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T20:27:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0bbdeb34-ad13-4f85-88d3-e11357ad0e7b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T20:27:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0bbdeb34-ad13-4f85-88d3-e11357ad0e7b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T20:27:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0bbdeb34-ad13-4f85-88d3-e11357ad0e7b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ecc78d/rate-test-model-ecc78d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-ecc78d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T20:27:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0bbdeb34-ad13-4f85-88d3-e11357ad0e7b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T20:27:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0bbdeb34-ad13-4f85-88d3-e11357ad0e7b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T20:27:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0bbdeb34-ad13-4f85-88d3-e11357ad0e7b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T20:27:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0bbdeb34-ad13-4f85-88d3-e11357ad0e7b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T20:27:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0bbdeb34-ad13-4f85-88d3-e11357ad0e7b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T20:27:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d2589d17-7ea2-43b0-add0-8c7e2922b5d3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:37346","PortSpecifier":{"PortValue":37346}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d2589d17-7ea2-43b0-add0-8c7e2922b5d3","method":"POST","path":"/ai-tenant-e2e-shared-a-76db83/rate-test-model-76db83/v1/completions","host":"e2e-shared-a-76db83.apps.f432e014-de42-4e5c-8c87-f51ff4616134.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T20:27:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d2589d17-7ea2-43b0-add0-8c7e2922b5d3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:37346","PortSpecifier":{"PortValue":37346}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784060831,"nanos":495242629},"http":{"id":"d2589d17-7ea2-43b0-add0-8c7e2922b5d3","method":"POST","headers":{":authority":"e2e-shared-a-76db83.apps.f432e014-de42-4e5c-8c87-f51ff4616134.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-76db83/rate-test-model-76db83/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T20:27:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d2589d17-7ea2-43b0-add0-8c7e2922b5d3","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-X2RAGKzOmfNqv6uu_yYWFLKUiFAKDuPuLMmm1WCLg70mM1XrdiuA0KOyCKrm"} {"level":"debug","ts":"2026-07-14T20:27:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d2589d17-7ea2-43b0-add0-8c7e2922b5d3","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-76db83.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-X2RAGKzOmfNqv6uu_yYWFLKUiFAKDuPuLMmm1WCLg70mM1XrdiuA0KOyCKrm\"}"} {"level":"debug","ts":"2026-07-14T20:27:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d2589d17-7ea2-43b0-add0-8c7e2922b5d3","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-76db83.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1a05a913-baae-4bc5-9582-53201336fe7a","keyName":"e2e-rate-a-464aa6","subscription":"e2e-rate-iso-a-464aa6","tenant":"e2e-shared-a-76db83","userId":"1a05a913-baae-4bc5-9582-53201336fe7a","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T20:27:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d2589d17-7ea2-43b0-add0-8c7e2922b5d3","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-76db83.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-76db83/rate-test-model-76db83\",\"requestedSubscription\":\"e2e-rate-iso-a-464aa6\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-14T20:27:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d2589d17-7ea2-43b0-add0-8c7e2922b5d3","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-76db83.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-76db83","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-464aa6","namespace":"ai-tenant-e2e-shared-a-76db83","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-14T20:27:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d2589d17-7ea2-43b0-add0-8c7e2922b5d3","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T20:27:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d2589d17-7ea2-43b0-add0-8c7e2922b5d3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T20:27:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d2589d17-7ea2-43b0-add0-8c7e2922b5d3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T20:27:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d2589d17-7ea2-43b0-add0-8c7e2922b5d3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-76db83/rate-test-model-76db83\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-76db83/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T20:27:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d2589d17-7ea2-43b0-add0-8c7e2922b5d3","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T20:27:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d2589d17-7ea2-43b0-add0-8c7e2922b5d3","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T20:27:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d2589d17-7ea2-43b0-add0-8c7e2922b5d3","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-464aa6"} {"level":"debug","ts":"2026-07-14T20:27:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d2589d17-7ea2-43b0-add0-8c7e2922b5d3","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T20:27:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d2589d17-7ea2-43b0-add0-8c7e2922b5d3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"1a05a913-baae-4bc5-9582-53201336fe7a","keyName":"e2e-rate-a-464aa6","selected_subscription":"e2e-rate-iso-a-464aa6","selected_subscription_key":"ai-tenant-e2e-shared-a-76db83/e2e-rate-iso-a-464aa6@ai-tenant-e2e-shared-a-76db83/rate-test-model-76db83","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-76db83","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-464aa6","namespace":"ai-tenant-e2e-shared-a-76db83","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-14T20:27:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d2589d17-7ea2-43b0-add0-8c7e2922b5d3","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T20:27:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d2589d17-7ea2-43b0-add0-8c7e2922b5d3","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T20:27:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3c6f0c37-8701-4a9c-ac06-60fe5208efe5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:37362","PortSpecifier":{"PortValue":37362}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3c6f0c37-8701-4a9c-ac06-60fe5208efe5","method":"POST","path":"/ai-tenant-e2e-shared-a-76db83/rate-test-model-76db83/v1/completions","host":"e2e-shared-a-76db83.apps.f432e014-de42-4e5c-8c87-f51ff4616134.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T20:27:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3c6f0c37-8701-4a9c-ac06-60fe5208efe5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:37362","PortSpecifier":{"PortValue":37362}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784060832,"nanos":559684994},"http":{"id":"3c6f0c37-8701-4a9c-ac06-60fe5208efe5","method":"POST","headers":{":authority":"e2e-shared-a-76db83.apps.f432e014-de42-4e5c-8c87-f51ff4616134.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-76db83/rate-test-model-76db83/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T20:27:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3c6f0c37-8701-4a9c-ac06-60fe5208efe5","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-X2RAGKzOmfNqv6uu_yYWFLKUiFAKDuPuLMmm1WCLg70mM1XrdiuA0KOyCKrm"} {"level":"debug","ts":"2026-07-14T20:27:12Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3c6f0c37-8701-4a9c-ac06-60fe5208efe5","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-76db83.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-X2RAGKzOmfNqv6uu_yYWFLKUiFAKDuPuLMmm1WCLg70mM1XrdiuA0KOyCKrm\"}"} {"level":"debug","ts":"2026-07-14T20:27:12Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3c6f0c37-8701-4a9c-ac06-60fe5208efe5","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-76db83.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1a05a913-baae-4bc5-9582-53201336fe7a","keyName":"e2e-rate-a-464aa6","subscription":"e2e-rate-iso-a-464aa6","tenant":"e2e-shared-a-76db83","userId":"1a05a913-baae-4bc5-9582-53201336fe7a","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T20:27:12Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3c6f0c37-8701-4a9c-ac06-60fe5208efe5","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-76db83.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-76db83/rate-test-model-76db83\",\"requestedSubscription\":\"e2e-rate-iso-a-464aa6\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-14T20:27:12Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3c6f0c37-8701-4a9c-ac06-60fe5208efe5","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-76db83.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-76db83","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-464aa6","namespace":"ai-tenant-e2e-shared-a-76db83","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-14T20:27:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3c6f0c37-8701-4a9c-ac06-60fe5208efe5","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T20:27:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3c6f0c37-8701-4a9c-ac06-60fe5208efe5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T20:27:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3c6f0c37-8701-4a9c-ac06-60fe5208efe5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T20:27:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3c6f0c37-8701-4a9c-ac06-60fe5208efe5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-76db83/rate-test-model-76db83\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-76db83/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T20:27:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3c6f0c37-8701-4a9c-ac06-60fe5208efe5","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T20:27:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3c6f0c37-8701-4a9c-ac06-60fe5208efe5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T20:27:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3c6f0c37-8701-4a9c-ac06-60fe5208efe5","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-464aa6"} {"level":"debug","ts":"2026-07-14T20:27:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3c6f0c37-8701-4a9c-ac06-60fe5208efe5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T20:27:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3c6f0c37-8701-4a9c-ac06-60fe5208efe5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"1a05a913-baae-4bc5-9582-53201336fe7a","keyName":"e2e-rate-a-464aa6","selected_subscription":"e2e-rate-iso-a-464aa6","selected_subscription_key":"ai-tenant-e2e-shared-a-76db83/e2e-rate-iso-a-464aa6@ai-tenant-e2e-shared-a-76db83/rate-test-model-76db83","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-76db83","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-464aa6","namespace":"ai-tenant-e2e-shared-a-76db83","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-14T20:27:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3c6f0c37-8701-4a9c-ac06-60fe5208efe5","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T20:27:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3c6f0c37-8701-4a9c-ac06-60fe5208efe5","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T20:27:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8e709005-ee4d-4956-b382-8cdf2348d6b4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:37364","PortSpecifier":{"PortValue":37364}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8e709005-ee4d-4956-b382-8cdf2348d6b4","method":"POST","path":"/ai-tenant-e2e-shared-a-76db83/rate-test-model-76db83/v1/completions","host":"e2e-shared-a-76db83.apps.f432e014-de42-4e5c-8c87-f51ff4616134.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T20:27:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8e709005-ee4d-4956-b382-8cdf2348d6b4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:37364","PortSpecifier":{"PortValue":37364}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784060833,"nanos":597092916},"http":{"id":"8e709005-ee4d-4956-b382-8cdf2348d6b4","method":"POST","headers":{":authority":"e2e-shared-a-76db83.apps.f432e014-de42-4e5c-8c87-f51ff4616134.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-76db83/rate-test-model-76db83/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T20:27:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8e709005-ee4d-4956-b382-8cdf2348d6b4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-X2RAGKzOmfNqv6uu_yYWFLKUiFAKDuPuLMmm1WCLg70mM1XrdiuA0KOyCKrm"} {"level":"debug","ts":"2026-07-14T20:27:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8e709005-ee4d-4956-b382-8cdf2348d6b4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-76db83.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-X2RAGKzOmfNqv6uu_yYWFLKUiFAKDuPuLMmm1WCLg70mM1XrdiuA0KOyCKrm\"}"} {"level":"debug","ts":"2026-07-14T20:27:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8e709005-ee4d-4956-b382-8cdf2348d6b4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-76db83.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1a05a913-baae-4bc5-9582-53201336fe7a","keyName":"e2e-rate-a-464aa6","subscription":"e2e-rate-iso-a-464aa6","tenant":"e2e-shared-a-76db83","userId":"1a05a913-baae-4bc5-9582-53201336fe7a","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T20:27:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8e709005-ee4d-4956-b382-8cdf2348d6b4","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-76db83.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-76db83/rate-test-model-76db83\",\"requestedSubscription\":\"e2e-rate-iso-a-464aa6\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-14T20:27:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8e709005-ee4d-4956-b382-8cdf2348d6b4","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-76db83.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-76db83","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-464aa6","namespace":"ai-tenant-e2e-shared-a-76db83","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-14T20:27:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8e709005-ee4d-4956-b382-8cdf2348d6b4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T20:27:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8e709005-ee4d-4956-b382-8cdf2348d6b4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T20:27:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8e709005-ee4d-4956-b382-8cdf2348d6b4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T20:27:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8e709005-ee4d-4956-b382-8cdf2348d6b4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-76db83/rate-test-model-76db83\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-76db83/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T20:27:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8e709005-ee4d-4956-b382-8cdf2348d6b4","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T20:27:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8e709005-ee4d-4956-b382-8cdf2348d6b4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T20:27:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8e709005-ee4d-4956-b382-8cdf2348d6b4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-464aa6"} {"level":"debug","ts":"2026-07-14T20:27:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8e709005-ee4d-4956-b382-8cdf2348d6b4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T20:27:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8e709005-ee4d-4956-b382-8cdf2348d6b4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"1a05a913-baae-4bc5-9582-53201336fe7a","keyName":"e2e-rate-a-464aa6","selected_subscription":"e2e-rate-iso-a-464aa6","selected_subscription_key":"ai-tenant-e2e-shared-a-76db83/e2e-rate-iso-a-464aa6@ai-tenant-e2e-shared-a-76db83/rate-test-model-76db83","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-76db83","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-464aa6","namespace":"ai-tenant-e2e-shared-a-76db83","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-14T20:27:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8e709005-ee4d-4956-b382-8cdf2348d6b4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T20:27:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8e709005-ee4d-4956-b382-8cdf2348d6b4","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T20:27:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8961063b-16c1-4c46-9a0a-8fe50b8fe7e6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:37748","PortSpecifier":{"PortValue":37748}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8961063b-16c1-4c46-9a0a-8fe50b8fe7e6","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-76db83.apps.f432e014-de42-4e5c-8c87-f51ff4616134.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T20:27:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8961063b-16c1-4c46-9a0a-8fe50b8fe7e6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:37748","PortSpecifier":{"PortValue":37748}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784060846,"nanos":595585350},"http":{"id":"8961063b-16c1-4c46-9a0a-8fe50b8fe7e6","method":"POST","headers":{":authority":"e2e-shared-a-76db83.apps.f432e014-de42-4e5c-8c87-f51ff4616134.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T20:27:26Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8961063b-16c1-4c46-9a0a-8fe50b8fe7e6","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T20:27:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8961063b-16c1-4c46-9a0a-8fe50b8fe7e6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"49ca3997-2250-49c1-a4df-f91ee4d9d217","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=10e4cf38-4c6b-49fd-94e4-421e73bde9fc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f51ff4616134"]}} {"level":"debug","ts":"2026-07-14T20:27:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8961063b-16c1-4c46-9a0a-8fe50b8fe7e6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f51ff4616134"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=10e4cf38-4c6b-49fd-94e4-421e73bde9fc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"49ca3997-2250-49c1-a4df-f91ee4d9d217","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4fef5f539b37e4ed510c125799947d892a376acd90ebba131ba48acc58ad39f1"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-76db83.apps.f432e014-de42-4e5c-8c87-f51ff4616134.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T20:27:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8961063b-16c1-4c46-9a0a-8fe50b8fe7e6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T20:27:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8961063b-16c1-4c46-9a0a-8fe50b8fe7e6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T20:27:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8961063b-16c1-4c46-9a0a-8fe50b8fe7e6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-76db83/rate-test-model-76db83\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-76db83/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T20:27:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8961063b-16c1-4c46-9a0a-8fe50b8fe7e6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T20:27:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8961063b-16c1-4c46-9a0a-8fe50b8fe7e6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T20:27:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8961063b-16c1-4c46-9a0a-8fe50b8fe7e6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-14T20:27:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8961063b-16c1-4c46-9a0a-8fe50b8fe7e6","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T20:27:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8961063b-16c1-4c46-9a0a-8fe50b8fe7e6","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T20:27:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"60928d84-213c-4053-b033-4cc22e50cfcc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:41838","PortSpecifier":{"PortValue":41838}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"60928d84-213c-4053-b033-4cc22e50cfcc","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-ecc78d.apps.f432e014-de42-4e5c-8c87-f51ff4616134.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T20:27:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"60928d84-213c-4053-b033-4cc22e50cfcc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:41838","PortSpecifier":{"PortValue":41838}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784060846,"nanos":635451652},"http":{"id":"60928d84-213c-4053-b033-4cc22e50cfcc","method":"POST","headers":{":authority":"e2e-shared-b-ecc78d.apps.f432e014-de42-4e5c-8c87-f51ff4616134.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T20:27:26Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"60928d84-213c-4053-b033-4cc22e50cfcc","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T20:27:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"60928d84-213c-4053-b033-4cc22e50cfcc","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"49ca3997-2250-49c1-a4df-f91ee4d9d217","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=10e4cf38-4c6b-49fd-94e4-421e73bde9fc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f51ff4616134"]}} {"level":"debug","ts":"2026-07-14T20:27:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"60928d84-213c-4053-b033-4cc22e50cfcc","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f51ff4616134"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=10e4cf38-4c6b-49fd-94e4-421e73bde9fc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"49ca3997-2250-49c1-a4df-f91ee4d9d217","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"850c6f9b19f2e6867c79d7d9d65046a38257222772e1ba471177620d907bc3db"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-ecc78d.apps.f432e014-de42-4e5c-8c87-f51ff4616134.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T20:27:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"60928d84-213c-4053-b033-4cc22e50cfcc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T20:27:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"60928d84-213c-4053-b033-4cc22e50cfcc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T20:27:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"60928d84-213c-4053-b033-4cc22e50cfcc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ecc78d/rate-test-model-ecc78d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-ecc78d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T20:27:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"60928d84-213c-4053-b033-4cc22e50cfcc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T20:27:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"60928d84-213c-4053-b033-4cc22e50cfcc","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T20:27:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"60928d84-213c-4053-b033-4cc22e50cfcc","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T20:27:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"60928d84-213c-4053-b033-4cc22e50cfcc","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T20:27:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"60928d84-213c-4053-b033-4cc22e50cfcc","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T20:27:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"24c369f0-592e-4f5b-a211-ce3a1fce297c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:37758","PortSpecifier":{"PortValue":37758}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"24c369f0-592e-4f5b-a211-ce3a1fce297c","method":"POST","path":"/ai-tenant-e2e-shared-a-76db83/rate-test-model-76db83/v1/completions","host":"e2e-shared-a-76db83.apps.f432e014-de42-4e5c-8c87-f51ff4616134.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T20:27:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"24c369f0-592e-4f5b-a211-ce3a1fce297c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:37758","PortSpecifier":{"PortValue":37758}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784060846,"nanos":674558132},"http":{"id":"24c369f0-592e-4f5b-a211-ce3a1fce297c","method":"POST","headers":{":authority":"e2e-shared-a-76db83.apps.f432e014-de42-4e5c-8c87-f51ff4616134.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-76db83/rate-test-model-76db83/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T20:27:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"24c369f0-592e-4f5b-a211-ce3a1fce297c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-XpZGnyYHSle4QooG_CjUTfeuwOxnXlwHWTfDU8fUdRIgdugJvhfwCQOUXZw7"} {"level":"debug","ts":"2026-07-14T20:27:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"24c369f0-592e-4f5b-a211-ce3a1fce297c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-76db83.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-XpZGnyYHSle4QooG_CjUTfeuwOxnXlwHWTfDU8fUdRIgdugJvhfwCQOUXZw7\"}"} {"level":"debug","ts":"2026-07-14T20:27:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"24c369f0-592e-4f5b-a211-ce3a1fce297c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-76db83.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"be98f049-da1b-49d7-b782-0c71f1391ad7","keyName":"e2e-rate-a-a3b3bf","subscription":"e2e-rate-iso-a-a3b3bf","tenant":"e2e-shared-a-76db83","userId":"be98f049-da1b-49d7-b782-0c71f1391ad7","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T20:27:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"24c369f0-592e-4f5b-a211-ce3a1fce297c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-76db83.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-76db83/rate-test-model-76db83\",\"requestedSubscription\":\"e2e-rate-iso-a-a3b3bf\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-14T20:27:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"24c369f0-592e-4f5b-a211-ce3a1fce297c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-76db83.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-76db83","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a3b3bf","namespace":"ai-tenant-e2e-shared-a-76db83","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-14T20:27:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"24c369f0-592e-4f5b-a211-ce3a1fce297c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T20:27:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"24c369f0-592e-4f5b-a211-ce3a1fce297c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T20:27:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"24c369f0-592e-4f5b-a211-ce3a1fce297c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T20:27:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"24c369f0-592e-4f5b-a211-ce3a1fce297c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-76db83/rate-test-model-76db83\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-76db83/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T20:27:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"24c369f0-592e-4f5b-a211-ce3a1fce297c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T20:27:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"24c369f0-592e-4f5b-a211-ce3a1fce297c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T20:27:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"24c369f0-592e-4f5b-a211-ce3a1fce297c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T20:27:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"24c369f0-592e-4f5b-a211-ce3a1fce297c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a3b3bf"} {"level":"debug","ts":"2026-07-14T20:27:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"24c369f0-592e-4f5b-a211-ce3a1fce297c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"be98f049-da1b-49d7-b782-0c71f1391ad7","keyName":"e2e-rate-a-a3b3bf","selected_subscription":"e2e-rate-iso-a-a3b3bf","selected_subscription_key":"ai-tenant-e2e-shared-a-76db83/e2e-rate-iso-a-a3b3bf@ai-tenant-e2e-shared-a-76db83/rate-test-model-76db83","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-76db83","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a3b3bf","namespace":"ai-tenant-e2e-shared-a-76db83","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-14T20:27:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"24c369f0-592e-4f5b-a211-ce3a1fce297c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T20:27:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"24c369f0-592e-4f5b-a211-ce3a1fce297c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T20:27:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5b0d64ef-a1e2-4197-8d1f-3c1109cb9cfc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:37768","PortSpecifier":{"PortValue":37768}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5b0d64ef-a1e2-4197-8d1f-3c1109cb9cfc","method":"POST","path":"/ai-tenant-e2e-shared-a-76db83/rate-test-model-76db83/v1/completions","host":"e2e-shared-a-76db83.apps.f432e014-de42-4e5c-8c87-f51ff4616134.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T20:27:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5b0d64ef-a1e2-4197-8d1f-3c1109cb9cfc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:37768","PortSpecifier":{"PortValue":37768}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784060847,"nanos":718298698},"http":{"id":"5b0d64ef-a1e2-4197-8d1f-3c1109cb9cfc","method":"POST","headers":{":authority":"e2e-shared-a-76db83.apps.f432e014-de42-4e5c-8c87-f51ff4616134.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-76db83/rate-test-model-76db83/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T20:27:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5b0d64ef-a1e2-4197-8d1f-3c1109cb9cfc","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-XpZGnyYHSle4QooG_CjUTfeuwOxnXlwHWTfDU8fUdRIgdugJvhfwCQOUXZw7"} {"level":"debug","ts":"2026-07-14T20:27:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5b0d64ef-a1e2-4197-8d1f-3c1109cb9cfc","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-76db83.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-XpZGnyYHSle4QooG_CjUTfeuwOxnXlwHWTfDU8fUdRIgdugJvhfwCQOUXZw7\"}"} {"level":"debug","ts":"2026-07-14T20:27:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5b0d64ef-a1e2-4197-8d1f-3c1109cb9cfc","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-76db83.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"be98f049-da1b-49d7-b782-0c71f1391ad7","keyName":"e2e-rate-a-a3b3bf","subscription":"e2e-rate-iso-a-a3b3bf","tenant":"e2e-shared-a-76db83","userId":"be98f049-da1b-49d7-b782-0c71f1391ad7","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T20:27:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5b0d64ef-a1e2-4197-8d1f-3c1109cb9cfc","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-76db83.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-76db83/rate-test-model-76db83\",\"requestedSubscription\":\"e2e-rate-iso-a-a3b3bf\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-14T20:27:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5b0d64ef-a1e2-4197-8d1f-3c1109cb9cfc","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-76db83.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-76db83","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a3b3bf","namespace":"ai-tenant-e2e-shared-a-76db83","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-14T20:27:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5b0d64ef-a1e2-4197-8d1f-3c1109cb9cfc","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T20:27:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5b0d64ef-a1e2-4197-8d1f-3c1109cb9cfc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T20:27:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5b0d64ef-a1e2-4197-8d1f-3c1109cb9cfc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T20:27:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5b0d64ef-a1e2-4197-8d1f-3c1109cb9cfc","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T20:27:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5b0d64ef-a1e2-4197-8d1f-3c1109cb9cfc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-76db83/rate-test-model-76db83\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-76db83/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T20:27:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5b0d64ef-a1e2-4197-8d1f-3c1109cb9cfc","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T20:27:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5b0d64ef-a1e2-4197-8d1f-3c1109cb9cfc","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T20:27:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5b0d64ef-a1e2-4197-8d1f-3c1109cb9cfc","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a3b3bf"} {"level":"debug","ts":"2026-07-14T20:27:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5b0d64ef-a1e2-4197-8d1f-3c1109cb9cfc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"be98f049-da1b-49d7-b782-0c71f1391ad7","keyName":"e2e-rate-a-a3b3bf","selected_subscription":"e2e-rate-iso-a-a3b3bf","selected_subscription_key":"ai-tenant-e2e-shared-a-76db83/e2e-rate-iso-a-a3b3bf@ai-tenant-e2e-shared-a-76db83/rate-test-model-76db83","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-76db83","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a3b3bf","namespace":"ai-tenant-e2e-shared-a-76db83","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-14T20:27:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5b0d64ef-a1e2-4197-8d1f-3c1109cb9cfc","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T20:27:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5b0d64ef-a1e2-4197-8d1f-3c1109cb9cfc","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T20:27:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"03ebe41f-51e2-43be-95f5-2838f2bd9d8c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:37778","PortSpecifier":{"PortValue":37778}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"03ebe41f-51e2-43be-95f5-2838f2bd9d8c","method":"POST","path":"/ai-tenant-e2e-shared-a-76db83/rate-test-model-76db83/v1/completions","host":"e2e-shared-a-76db83.apps.f432e014-de42-4e5c-8c87-f51ff4616134.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T20:27:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"03ebe41f-51e2-43be-95f5-2838f2bd9d8c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:37778","PortSpecifier":{"PortValue":37778}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784060848,"nanos":757034764},"http":{"id":"03ebe41f-51e2-43be-95f5-2838f2bd9d8c","method":"POST","headers":{":authority":"e2e-shared-a-76db83.apps.f432e014-de42-4e5c-8c87-f51ff4616134.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-76db83/rate-test-model-76db83/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T20:27:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"03ebe41f-51e2-43be-95f5-2838f2bd9d8c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-XpZGnyYHSle4QooG_CjUTfeuwOxnXlwHWTfDU8fUdRIgdugJvhfwCQOUXZw7"} {"level":"debug","ts":"2026-07-14T20:27:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"03ebe41f-51e2-43be-95f5-2838f2bd9d8c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-76db83.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-XpZGnyYHSle4QooG_CjUTfeuwOxnXlwHWTfDU8fUdRIgdugJvhfwCQOUXZw7\"}"} {"level":"debug","ts":"2026-07-14T20:27:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"03ebe41f-51e2-43be-95f5-2838f2bd9d8c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-76db83.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"be98f049-da1b-49d7-b782-0c71f1391ad7","keyName":"e2e-rate-a-a3b3bf","subscription":"e2e-rate-iso-a-a3b3bf","tenant":"e2e-shared-a-76db83","userId":"be98f049-da1b-49d7-b782-0c71f1391ad7","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T20:27:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"03ebe41f-51e2-43be-95f5-2838f2bd9d8c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-76db83.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-76db83/rate-test-model-76db83\",\"requestedSubscription\":\"e2e-rate-iso-a-a3b3bf\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-14T20:27:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"03ebe41f-51e2-43be-95f5-2838f2bd9d8c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-76db83.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-76db83","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a3b3bf","namespace":"ai-tenant-e2e-shared-a-76db83","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-14T20:27:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"03ebe41f-51e2-43be-95f5-2838f2bd9d8c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T20:27:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"03ebe41f-51e2-43be-95f5-2838f2bd9d8c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T20:27:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"03ebe41f-51e2-43be-95f5-2838f2bd9d8c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T20:27:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"03ebe41f-51e2-43be-95f5-2838f2bd9d8c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-76db83/rate-test-model-76db83\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-76db83/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T20:27:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"03ebe41f-51e2-43be-95f5-2838f2bd9d8c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T20:27:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"03ebe41f-51e2-43be-95f5-2838f2bd9d8c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T20:27:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"03ebe41f-51e2-43be-95f5-2838f2bd9d8c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a3b3bf"} {"level":"debug","ts":"2026-07-14T20:27:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"03ebe41f-51e2-43be-95f5-2838f2bd9d8c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T20:27:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"03ebe41f-51e2-43be-95f5-2838f2bd9d8c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"be98f049-da1b-49d7-b782-0c71f1391ad7","keyName":"e2e-rate-a-a3b3bf","selected_subscription":"e2e-rate-iso-a-a3b3bf","selected_subscription_key":"ai-tenant-e2e-shared-a-76db83/e2e-rate-iso-a-a3b3bf@ai-tenant-e2e-shared-a-76db83/rate-test-model-76db83","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-76db83","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a3b3bf","namespace":"ai-tenant-e2e-shared-a-76db83","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-14T20:27:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"03ebe41f-51e2-43be-95f5-2838f2bd9d8c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T20:27:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"03ebe41f-51e2-43be-95f5-2838f2bd9d8c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T20:27:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cd330425-8094-4871-90d8-564c36ef4955","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:41854","PortSpecifier":{"PortValue":41854}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cd330425-8094-4871-90d8-564c36ef4955","method":"POST","path":"/ai-tenant-e2e-shared-b-ecc78d/rate-test-model-ecc78d/v1/completions","host":"e2e-shared-b-ecc78d.apps.f432e014-de42-4e5c-8c87-f51ff4616134.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T20:27:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cd330425-8094-4871-90d8-564c36ef4955","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:41854","PortSpecifier":{"PortValue":41854}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784060848,"nanos":795953034},"http":{"id":"cd330425-8094-4871-90d8-564c36ef4955","method":"POST","headers":{":authority":"e2e-shared-b-ecc78d.apps.f432e014-de42-4e5c-8c87-f51ff4616134.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-ecc78d/rate-test-model-ecc78d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T20:27:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cd330425-8094-4871-90d8-564c36ef4955","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1AdPekHCIM2kjBeA1_NWRmqLElfLfdnQ3JS9NdRO643Jlr3Y7wVtr2DUoh0NV"} {"level":"debug","ts":"2026-07-14T20:27:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cd330425-8094-4871-90d8-564c36ef4955","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-ecc78d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1AdPekHCIM2kjBeA1_NWRmqLElfLfdnQ3JS9NdRO643Jlr3Y7wVtr2DUoh0NV\"}"} {"level":"debug","ts":"2026-07-14T20:27:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cd330425-8094-4871-90d8-564c36ef4955","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-ecc78d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5d5f238f-46ad-4ff4-95e0-0a2a1df699d4","keyName":"e2e-rate-b-a3b3bf","subscription":"e2e-rate-iso-b-a3b3bf","tenant":"e2e-shared-b-ecc78d","userId":"5d5f238f-46ad-4ff4-95e0-0a2a1df699d4","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T20:27:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cd330425-8094-4871-90d8-564c36ef4955","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-ecc78d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-ecc78d/rate-test-model-ecc78d\",\"requestedSubscription\":\"e2e-rate-iso-b-a3b3bf\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-14T20:27:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cd330425-8094-4871-90d8-564c36ef4955","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-ecc78d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-ecc78d","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-a3b3bf","namespace":"ai-tenant-e2e-shared-b-ecc78d","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-14T20:27:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cd330425-8094-4871-90d8-564c36ef4955","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T20:27:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cd330425-8094-4871-90d8-564c36ef4955","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T20:27:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cd330425-8094-4871-90d8-564c36ef4955","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T20:27:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cd330425-8094-4871-90d8-564c36ef4955","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ecc78d/rate-test-model-ecc78d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-ecc78d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T20:27:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cd330425-8094-4871-90d8-564c36ef4955","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T20:27:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cd330425-8094-4871-90d8-564c36ef4955","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-a3b3bf"} {"level":"debug","ts":"2026-07-14T20:27:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cd330425-8094-4871-90d8-564c36ef4955","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T20:27:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cd330425-8094-4871-90d8-564c36ef4955","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T20:27:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cd330425-8094-4871-90d8-564c36ef4955","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"5d5f238f-46ad-4ff4-95e0-0a2a1df699d4","keyName":"e2e-rate-b-a3b3bf","selected_subscription":"e2e-rate-iso-b-a3b3bf","selected_subscription_key":"ai-tenant-e2e-shared-b-ecc78d/e2e-rate-iso-b-a3b3bf@ai-tenant-e2e-shared-b-ecc78d/rate-test-model-ecc78d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-ecc78d","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-a3b3bf","namespace":"ai-tenant-e2e-shared-b-ecc78d","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-14T20:27:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cd330425-8094-4871-90d8-564c36ef4955","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T20:27:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cd330425-8094-4871-90d8-564c36ef4955","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T20:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c13cb999f540a85cc0a9b45a3aef54bcf27d670c3afc49ee0ae95fb9cee0f5cc"} {"level":"info","ts":"2026-07-14T20:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/db139fbec380c8cc7d32154fd39330700ee9c020a31c9b5652130cec85a68368"} {"level":"info","ts":"2026-07-14T20:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c550c519aa2c8212b5d633772ee32c4726a2caf5dda7735a74a1dde21b30adff"} {"level":"info","ts":"2026-07-14T20:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d1b8032d6980d238bbfd03ec7275d9abac854a2f2db003f3b28140b3299cb58b"} {"level":"info","ts":"2026-07-14T20:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a2038c67495b7cae4a744546f2212afd3463b916b7f7aaeb29cba469857bfabe"} {"level":"info","ts":"2026-07-14T20:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9ecfe0723855c4bf3615f2cd4f20a118c20cee4a28ab2e1509093dc6a61fe594"} {"level":"info","ts":"2026-07-14T20:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3f507079541e8389d6122335071e7f9d21cb19719105f1c9e0325d0941f7e5b8"} {"level":"info","ts":"2026-07-14T20:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c29396c245f70b5c749d303d18dd9b8546c1142241ed5ba58c2bea431af23552"} {"level":"info","ts":"2026-07-14T20:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b6f2248de1ab1ef405c3d1f9f94f30e6863f415d866cb453b4a13c085df9e42e"} {"level":"info","ts":"2026-07-14T20:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a9fbd0307114c9cbaad76ac7a8dfa807ad766fe8de6b44a13912bd7c27af06c0"} {"level":"info","ts":"2026-07-14T20:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/00b07e527b7d2acf37bbb66b06bfe2ffa02131122ff5b9d3a2ad293273d971cb"} {"level":"info","ts":"2026-07-14T20:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3068e2153b64b51eb3ef81ac4bfe59c2985a5fd92a636b18321da620b2776fdc"} {"level":"info","ts":"2026-07-14T20:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6377c4ef2594a1d85536d259240266a16e018edc77e2d6aa57c01f878b968e01"} {"level":"info","ts":"2026-07-14T20:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/570326af879efadf5a2a64fb1c07473224d090176f66c70a74ff7f76a2d2de28"} {"level":"info","ts":"2026-07-14T20:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0a5f1a7a4b5b713c9ca3e43cf9562cd702115c5a182e40862afb54235f76a4cc"} {"level":"info","ts":"2026-07-14T20:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a621e94fde00d5580e2a472cff5d3cc17cf80643dfa78aeee2ca1127b6d51ae7"} {"level":"info","ts":"2026-07-14T20:28:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd"} {"level":"info","ts":"2026-07-14T20:28:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cbfa9dd5bf131c862db8cc4af053a3ae56f7ae1be83edce9e8cdede1ab5526f0"} {"level":"info","ts":"2026-07-14T20:28:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4fef5f539b37e4ed510c125799947d892a376acd90ebba131ba48acc58ad39f1"} {"level":"info","ts":"2026-07-14T20:28:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8c28b37ed679c5b23f59474eb4c452cbeaa570eb67fa3779e7aac7c34b6b82c5"} {"level":"info","ts":"2026-07-14T20:28:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ae277ecbc8c578edfe4f058b16407d98618208bc9007af82891c1c45fb9f5693"} {"level":"info","ts":"2026-07-14T20:28:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/850c6f9b19f2e6867c79d7d9d65046a38257222772e1ba471177620d907bc3db"} {"level":"info","ts":"2026-07-14T20:28:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6c9b65c949e1d48a6b1cfa1a7568066a47ced899e0af888985cf621659bb51ad"} {"level":"info","ts":"2026-07-14T20:28:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/97590f5cd28ec35ed98f78ac959e5d16f8e7df75ca6a5d12abd046201c08d912"}