--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) --- {"level":"info","ts":"2026-07-10T19:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f81cd037a8d858cfa8c53204a6b7f368e0f20c8b1c7abcf051fa4965010ba0e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04444ef7c8618701d76a75d02317c0fd017bd41789da1cf4d66502032be6bff6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:06:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:06:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["04444ef7c8618701d76a75d02317c0fd017bd41789da1cf4d66502032be6bff6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04444ef7c8618701d76a75d02317c0fd017bd41789da1cf4d66502032be6bff6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"003e8f7c9ad8f092e2a79ab25d6edd6d29cbd83f7a7432532f05bd22de2de6cf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e526c6fe7a402cb7996692ebf851a928668b0e70b3bc1202429a888d9b2823f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f81cd037a8d858cfa8c53204a6b7f368e0f20c8b1c7abcf051fa4965010ba0e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f81cd037a8d858cfa8c53204a6b7f368e0f20c8b1c7abcf051fa4965010ba0e"} {"level":"debug","ts":"2026-07-10T19:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04444ef7c8618701d76a75d02317c0fd017bd41789da1cf4d66502032be6bff6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e526c6fe7a402cb7996692ebf851a928668b0e70b3bc1202429a888d9b2823f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f81cd037a8d858cfa8c53204a6b7f368e0f20c8b1c7abcf051fa4965010ba0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:06:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:06:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f81cd037a8d858cfa8c53204a6b7f368e0f20c8b1c7abcf051fa4965010ba0e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/003e8f7c9ad8f092e2a79ab25d6edd6d29cbd83f7a7432532f05bd22de2de6cf"} {"level":"info","ts":"2026-07-10T19:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f81cd037a8d858cfa8c53204a6b7f368e0f20c8b1c7abcf051fa4965010ba0e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0445152dacdc1e877b1755ad1f95f10ef069d3417ca6792230112555893e95a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:06:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:06:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0445152dacdc1e877b1755ad1f95f10ef069d3417ca6792230112555893e95a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f81cd037a8d858cfa8c53204a6b7f368e0f20c8b1c7abcf051fa4965010ba0e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e526c6fe7a402cb7996692ebf851a928668b0e70b3bc1202429a888d9b2823f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:06:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:06:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e526c6fe7a402cb7996692ebf851a928668b0e70b3bc1202429a888d9b2823f"} {"level":"info","ts":"2026-07-10T19:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e526c6fe7a402cb7996692ebf851a928668b0e70b3bc1202429a888d9b2823f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0445152dacdc1e877b1755ad1f95f10ef069d3417ca6792230112555893e95a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e526c6fe7a402cb7996692ebf851a928668b0e70b3bc1202429a888d9b2823f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:06:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:06:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1e526c6fe7a402cb7996692ebf851a928668b0e70b3bc1202429a888d9b2823f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e526c6fe7a402cb7996692ebf851a928668b0e70b3bc1202429a888d9b2823f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0445152dacdc1e877b1755ad1f95f10ef069d3417ca6792230112555893e95a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e526c6fe7a402cb7996692ebf851a928668b0e70b3bc1202429a888d9b2823f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04444ef7c8618701d76a75d02317c0fd017bd41789da1cf4d66502032be6bff6"} {"level":"debug","ts":"2026-07-10T19:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0445152dacdc1e877b1755ad1f95f10ef069d3417ca6792230112555893e95a7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f81cd037a8d858cfa8c53204a6b7f368e0f20c8b1c7abcf051fa4965010ba0e"} {"level":"debug","ts":"2026-07-10T19:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e526c6fe7a402cb7996692ebf851a928668b0e70b3bc1202429a888d9b2823f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0445152dacdc1e877b1755ad1f95f10ef069d3417ca6792230112555893e95a7"} {"level":"debug","ts":"2026-07-10T19:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0445152dacdc1e877b1755ad1f95f10ef069d3417ca6792230112555893e95a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:06:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:06:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0445152dacdc1e877b1755ad1f95f10ef069d3417ca6792230112555893e95a7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e526c6fe7a402cb7996692ebf851a928668b0e70b3bc1202429a888d9b2823f"} {"level":"info","ts":"2026-07-10T19:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0445152dacdc1e877b1755ad1f95f10ef069d3417ca6792230112555893e95a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0445152dacdc1e877b1755ad1f95f10ef069d3417ca6792230112555893e95a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:06:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:06:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0445152dacdc1e877b1755ad1f95f10ef069d3417ca6792230112555893e95a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0445152dacdc1e877b1755ad1f95f10ef069d3417ca6792230112555893e95a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0445152dacdc1e877b1755ad1f95f10ef069d3417ca6792230112555893e95a7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0445152dacdc1e877b1755ad1f95f10ef069d3417ca6792230112555893e95a7"} {"level":"debug","ts":"2026-07-10T19:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0445152dacdc1e877b1755ad1f95f10ef069d3417ca6792230112555893e95a7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0445152dacdc1e877b1755ad1f95f10ef069d3417ca6792230112555893e95a7"} {"level":"debug","ts":"2026-07-10T19:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55162b8e5d496e56490eea59e3fcc5412abfe784d3b19f2e50e21d379fd73c63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:06:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:06:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55162b8e5d496e56490eea59e3fcc5412abfe784d3b19f2e50e21d379fd73c63","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0445152dacdc1e877b1755ad1f95f10ef069d3417ca6792230112555893e95a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:06:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:06:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0445152dacdc1e877b1755ad1f95f10ef069d3417ca6792230112555893e95a7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55162b8e5d496e56490eea59e3fcc5412abfe784d3b19f2e50e21d379fd73c63"} {"level":"info","ts":"2026-07-10T19:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0445152dacdc1e877b1755ad1f95f10ef069d3417ca6792230112555893e95a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55162b8e5d496e56490eea59e3fcc5412abfe784d3b19f2e50e21d379fd73c63","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0445152dacdc1e877b1755ad1f95f10ef069d3417ca6792230112555893e95a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55162b8e5d496e56490eea59e3fcc5412abfe784d3b19f2e50e21d379fd73c63","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55162b8e5d496e56490eea59e3fcc5412abfe784d3b19f2e50e21d379fd73c63"} {"level":"debug","ts":"2026-07-10T19:06:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55162b8e5d496e56490eea59e3fcc5412abfe784d3b19f2e50e21d379fd73c63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:06:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:06:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["55162b8e5d496e56490eea59e3fcc5412abfe784d3b19f2e50e21d379fd73c63"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:06:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0445152dacdc1e877b1755ad1f95f10ef069d3417ca6792230112555893e95a7"} {"level":"info","ts":"2026-07-10T19:06:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55162b8e5d496e56490eea59e3fcc5412abfe784d3b19f2e50e21d379fd73c63","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:06:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55162b8e5d496e56490eea59e3fcc5412abfe784d3b19f2e50e21d379fd73c63","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:06:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd6c442a3165f1d1b0f79742711ab07fbeea4c8c529f1e2c8033d8956080c15c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:06:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:06:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:06:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55162b8e5d496e56490eea59e3fcc5412abfe784d3b19f2e50e21d379fd73c63"} {"level":"info","ts":"2026-07-10T19:06:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd6c442a3165f1d1b0f79742711ab07fbeea4c8c529f1e2c8033d8956080c15c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:06:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd6c442a3165f1d1b0f79742711ab07fbeea4c8c529f1e2c8033d8956080c15c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:06:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:06:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:06:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd6c442a3165f1d1b0f79742711ab07fbeea4c8c529f1e2c8033d8956080c15c"} {"level":"info","ts":"2026-07-10T19:06:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd6c442a3165f1d1b0f79742711ab07fbeea4c8c529f1e2c8033d8956080c15c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:06:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd6c442a3165f1d1b0f79742711ab07fbeea4c8c529f1e2c8033d8956080c15c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:06:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:06:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-10T19:06:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"bd6c442a3165f1d1b0f79742711ab07fbeea4c8c529f1e2c8033d8956080c15c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"bd6c442a3165f1d1b0f79742711ab07fbeea4c8c529f1e2c8033d8956080c15c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-10T19:06:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd6c442a3165f1d1b0f79742711ab07fbeea4c8c529f1e2c8033d8956080c15c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:06:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd6c442a3165f1d1b0f79742711ab07fbeea4c8c529f1e2c8033d8956080c15c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:06:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd6c442a3165f1d1b0f79742711ab07fbeea4c8c529f1e2c8033d8956080c15c"} {"level":"info","ts":"2026-07-10T19:06:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd6c442a3165f1d1b0f79742711ab07fbeea4c8c529f1e2c8033d8956080c15c"} {"level":"debug","ts":"2026-07-10T19:06:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd6c442a3165f1d1b0f79742711ab07fbeea4c8c529f1e2c8033d8956080c15c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:06:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:06:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bd6c442a3165f1d1b0f79742711ab07fbeea4c8c529f1e2c8033d8956080c15c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:06:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd6c442a3165f1d1b0f79742711ab07fbeea4c8c529f1e2c8033d8956080c15c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:06:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd6c442a3165f1d1b0f79742711ab07fbeea4c8c529f1e2c8033d8956080c15c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:06:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:06:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:06:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd6c442a3165f1d1b0f79742711ab07fbeea4c8c529f1e2c8033d8956080c15c"} {"level":"info","ts":"2026-07-10T19:06:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd6c442a3165f1d1b0f79742711ab07fbeea4c8c529f1e2c8033d8956080c15c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:06:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd6c442a3165f1d1b0f79742711ab07fbeea4c8c529f1e2c8033d8956080c15c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:06:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd6c442a3165f1d1b0f79742711ab07fbeea4c8c529f1e2c8033d8956080c15c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:06:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd6c442a3165f1d1b0f79742711ab07fbeea4c8c529f1e2c8033d8956080c15c"} {"level":"debug","ts":"2026-07-10T19:06:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd6c442a3165f1d1b0f79742711ab07fbeea4c8c529f1e2c8033d8956080c15c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:06:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:06:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bd6c442a3165f1d1b0f79742711ab07fbeea4c8c529f1e2c8033d8956080c15c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:06:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd6c442a3165f1d1b0f79742711ab07fbeea4c8c529f1e2c8033d8956080c15c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:06:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd6c442a3165f1d1b0f79742711ab07fbeea4c8c529f1e2c8033d8956080c15c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:06:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd6c442a3165f1d1b0f79742711ab07fbeea4c8c529f1e2c8033d8956080c15c"} {"level":"debug","ts":"2026-07-10T19:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35322e841f878a999b9fb319d53b4ede55fab1a3f4e612b55f96e99b3dae2210","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:06:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:06:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35322e841f878a999b9fb319d53b4ede55fab1a3f4e612b55f96e99b3dae2210","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35322e841f878a999b9fb319d53b4ede55fab1a3f4e612b55f96e99b3dae2210","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35322e841f878a999b9fb319d53b4ede55fab1a3f4e612b55f96e99b3dae2210","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35322e841f878a999b9fb319d53b4ede55fab1a3f4e612b55f96e99b3dae2210"} {"level":"debug","ts":"2026-07-10T19:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35322e841f878a999b9fb319d53b4ede55fab1a3f4e612b55f96e99b3dae2210","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35322e841f878a999b9fb319d53b4ede55fab1a3f4e612b55f96e99b3dae2210"} {"level":"debug","ts":"2026-07-10T19:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35322e841f878a999b9fb319d53b4ede55fab1a3f4e612b55f96e99b3dae2210","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:06:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:06:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35322e841f878a999b9fb319d53b4ede55fab1a3f4e612b55f96e99b3dae2210"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35322e841f878a999b9fb319d53b4ede55fab1a3f4e612b55f96e99b3dae2210","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35322e841f878a999b9fb319d53b4ede55fab1a3f4e612b55f96e99b3dae2210","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:06:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:06:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35322e841f878a999b9fb319d53b4ede55fab1a3f4e612b55f96e99b3dae2210","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ea08d595c228ceba2113e379f55565a4cd4a8fd989416bcd8f13843f5e2d6d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:06:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:06:26Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35322e841f878a999b9fb319d53b4ede55fab1a3f4e612b55f96e99b3dae2210"} {"level":"info","ts":"2026-07-10T19:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ea08d595c228ceba2113e379f55565a4cd4a8fd989416bcd8f13843f5e2d6d5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35322e841f878a999b9fb319d53b4ede55fab1a3f4e612b55f96e99b3dae2210","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:06:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:06:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35322e841f878a999b9fb319d53b4ede55fab1a3f4e612b55f96e99b3dae2210"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35322e841f878a999b9fb319d53b4ede55fab1a3f4e612b55f96e99b3dae2210","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ea08d595c228ceba2113e379f55565a4cd4a8fd989416bcd8f13843f5e2d6d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:06:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:06:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ea08d595c228ceba2113e379f55565a4cd4a8fd989416bcd8f13843f5e2d6d5"} {"level":"info","ts":"2026-07-10T19:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ea08d595c228ceba2113e379f55565a4cd4a8fd989416bcd8f13843f5e2d6d5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35322e841f878a999b9fb319d53b4ede55fab1a3f4e612b55f96e99b3dae2210","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:06:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:06:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35322e841f878a999b9fb319d53b4ede55fab1a3f4e612b55f96e99b3dae2210"} {"level":"info","ts":"2026-07-10T19:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35322e841f878a999b9fb319d53b4ede55fab1a3f4e612b55f96e99b3dae2210","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ea08d595c228ceba2113e379f55565a4cd4a8fd989416bcd8f13843f5e2d6d5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35322e841f878a999b9fb319d53b4ede55fab1a3f4e612b55f96e99b3dae2210","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:06:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:06:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35322e841f878a999b9fb319d53b4ede55fab1a3f4e612b55f96e99b3dae2210"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35322e841f878a999b9fb319d53b4ede55fab1a3f4e612b55f96e99b3dae2210","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35322e841f878a999b9fb319d53b4ede55fab1a3f4e612b55f96e99b3dae2210","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:06:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:06:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35322e841f878a999b9fb319d53b4ede55fab1a3f4e612b55f96e99b3dae2210"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ea08d595c228ceba2113e379f55565a4cd4a8fd989416bcd8f13843f5e2d6d5"} {"level":"error","ts":"2026-07-10T19:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"35322e841f878a999b9fb319d53b4ede55fab1a3f4e612b55f96e99b3dae2210","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"35322e841f878a999b9fb319d53b4ede55fab1a3f4e612b55f96e99b3dae2210\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-10T19:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ea08d595c228ceba2113e379f55565a4cd4a8fd989416bcd8f13843f5e2d6d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:06:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:06:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3ea08d595c228ceba2113e379f55565a4cd4a8fd989416bcd8f13843f5e2d6d5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ea08d595c228ceba2113e379f55565a4cd4a8fd989416bcd8f13843f5e2d6d5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35322e841f878a999b9fb319d53b4ede55fab1a3f4e612b55f96e99b3dae2210","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:06:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:06:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35322e841f878a999b9fb319d53b4ede55fab1a3f4e612b55f96e99b3dae2210"} {"level":"info","ts":"2026-07-10T19:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35322e841f878a999b9fb319d53b4ede55fab1a3f4e612b55f96e99b3dae2210","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ea08d595c228ceba2113e379f55565a4cd4a8fd989416bcd8f13843f5e2d6d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:06:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:06:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ea08d595c228ceba2113e379f55565a4cd4a8fd989416bcd8f13843f5e2d6d5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36926324f558b8d47d838eb68bef8b32ac3885019930684ae92ea57eb447255f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:06:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:06:26Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ea08d595c228ceba2113e379f55565a4cd4a8fd989416bcd8f13843f5e2d6d5"} {"level":"info","ts":"2026-07-10T19:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36926324f558b8d47d838eb68bef8b32ac3885019930684ae92ea57eb447255f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35322e841f878a999b9fb319d53b4ede55fab1a3f4e612b55f96e99b3dae2210","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:06:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:06:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35322e841f878a999b9fb319d53b4ede55fab1a3f4e612b55f96e99b3dae2210"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36926324f558b8d47d838eb68bef8b32ac3885019930684ae92ea57eb447255f"} {"level":"info","ts":"2026-07-10T19:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35322e841f878a999b9fb319d53b4ede55fab1a3f4e612b55f96e99b3dae2210","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ea08d595c228ceba2113e379f55565a4cd4a8fd989416bcd8f13843f5e2d6d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:06:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:06:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3ea08d595c228ceba2113e379f55565a4cd4a8fd989416bcd8f13843f5e2d6d5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ea08d595c228ceba2113e379f55565a4cd4a8fd989416bcd8f13843f5e2d6d5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36926324f558b8d47d838eb68bef8b32ac3885019930684ae92ea57eb447255f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:06:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:06:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["36926324f558b8d47d838eb68bef8b32ac3885019930684ae92ea57eb447255f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35322e841f878a999b9fb319d53b4ede55fab1a3f4e612b55f96e99b3dae2210"} {"level":"info","ts":"2026-07-10T19:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36926324f558b8d47d838eb68bef8b32ac3885019930684ae92ea57eb447255f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35322e841f878a999b9fb319d53b4ede55fab1a3f4e612b55f96e99b3dae2210","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ea08d595c228ceba2113e379f55565a4cd4a8fd989416bcd8f13843f5e2d6d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:06:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:06:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ea08d595c228ceba2113e379f55565a4cd4a8fd989416bcd8f13843f5e2d6d5"} {"level":"info","ts":"2026-07-10T19:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ea08d595c228ceba2113e379f55565a4cd4a8fd989416bcd8f13843f5e2d6d5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36926324f558b8d47d838eb68bef8b32ac3885019930684ae92ea57eb447255f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:06:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:06:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36926324f558b8d47d838eb68bef8b32ac3885019930684ae92ea57eb447255f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ea08d595c228ceba2113e379f55565a4cd4a8fd989416bcd8f13843f5e2d6d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:06:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:06:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3ea08d595c228ceba2113e379f55565a4cd4a8fd989416bcd8f13843f5e2d6d5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36926324f558b8d47d838eb68bef8b32ac3885019930684ae92ea57eb447255f"} {"level":"info","ts":"2026-07-10T19:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ea08d595c228ceba2113e379f55565a4cd4a8fd989416bcd8f13843f5e2d6d5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36926324f558b8d47d838eb68bef8b32ac3885019930684ae92ea57eb447255f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:06:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:06:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["36926324f558b8d47d838eb68bef8b32ac3885019930684ae92ea57eb447255f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36926324f558b8d47d838eb68bef8b32ac3885019930684ae92ea57eb447255f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ea08d595c228ceba2113e379f55565a4cd4a8fd989416bcd8f13843f5e2d6d5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35322e841f878a999b9fb319d53b4ede55fab1a3f4e612b55f96e99b3dae2210"} {"level":"debug","ts":"2026-07-10T19:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36926324f558b8d47d838eb68bef8b32ac3885019930684ae92ea57eb447255f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ea08d595c228ceba2113e379f55565a4cd4a8fd989416bcd8f13843f5e2d6d5"} {"level":"info","ts":"2026-07-10T19:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36926324f558b8d47d838eb68bef8b32ac3885019930684ae92ea57eb447255f"} {"level":"debug","ts":"2026-07-10T19:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1c8408b7eac7706c8c390015049e5234d1d94ba478cd95938492f1585d84fdc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:06:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:06:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1c8408b7eac7706c8c390015049e5234d1d94ba478cd95938492f1585d84fdc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c1c8408b7eac7706c8c390015049e5234d1d94ba478cd95938492f1585d84fdc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1c8408b7eac7706c8c390015049e5234d1d94ba478cd95938492f1585d84fdc"} {"level":"debug","ts":"2026-07-10T19:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c1c8408b7eac7706c8c390015049e5234d1d94ba478cd95938492f1585d84fdc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c1c8408b7eac7706c8c390015049e5234d1d94ba478cd95938492f1585d84fdc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1c8408b7eac7706c8c390015049e5234d1d94ba478cd95938492f1585d84fdc"} {"level":"debug","ts":"2026-07-10T19:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1c8408b7eac7706c8c390015049e5234d1d94ba478cd95938492f1585d84fdc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:06:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:06:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c1c8408b7eac7706c8c390015049e5234d1d94ba478cd95938492f1585d84fdc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1c8408b7eac7706c8c390015049e5234d1d94ba478cd95938492f1585d84fdc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d2c43379bf83578b7069e3fcdd0de3bfdb8af29a020f2d49d3fbc8371b7fc3f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:06:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:06:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d2c43379bf83578b7069e3fcdd0de3bfdb8af29a020f2d49d3fbc8371b7fc3f"} {"level":"info","ts":"2026-07-10T19:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d2c43379bf83578b7069e3fcdd0de3bfdb8af29a020f2d49d3fbc8371b7fc3f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1c8408b7eac7706c8c390015049e5234d1d94ba478cd95938492f1585d84fdc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:06:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:06:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1c8408b7eac7706c8c390015049e5234d1d94ba478cd95938492f1585d84fdc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d2c43379bf83578b7069e3fcdd0de3bfdb8af29a020f2d49d3fbc8371b7fc3f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:06:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:06:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6d2c43379bf83578b7069e3fcdd0de3bfdb8af29a020f2d49d3fbc8371b7fc3f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1c8408b7eac7706c8c390015049e5234d1d94ba478cd95938492f1585d84fdc"} {"level":"info","ts":"2026-07-10T19:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d2c43379bf83578b7069e3fcdd0de3bfdb8af29a020f2d49d3fbc8371b7fc3f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1c8408b7eac7706c8c390015049e5234d1d94ba478cd95938492f1585d84fdc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:06:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:06:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c1c8408b7eac7706c8c390015049e5234d1d94ba478cd95938492f1585d84fdc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d2c43379bf83578b7069e3fcdd0de3bfdb8af29a020f2d49d3fbc8371b7fc3f"} {"level":"info","ts":"2026-07-10T19:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1c8408b7eac7706c8c390015049e5234d1d94ba478cd95938492f1585d84fdc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d2c43379bf83578b7069e3fcdd0de3bfdb8af29a020f2d49d3fbc8371b7fc3f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1c8408b7eac7706c8c390015049e5234d1d94ba478cd95938492f1585d84fdc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:06:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:06:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1c8408b7eac7706c8c390015049e5234d1d94ba478cd95938492f1585d84fdc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c1c8408b7eac7706c8c390015049e5234d1d94ba478cd95938492f1585d84fdc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c1c8408b7eac7706c8c390015049e5234d1d94ba478cd95938492f1585d84fdc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1c8408b7eac7706c8c390015049e5234d1d94ba478cd95938492f1585d84fdc"} {"level":"debug","ts":"2026-07-10T19:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea1f273c4c5f5478a3ddc5174a962c67f938ecd32e7fe226023a16e75e719b68","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:06:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:06:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea1f273c4c5f5478a3ddc5174a962c67f938ecd32e7fe226023a16e75e719b68","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1c8408b7eac7706c8c390015049e5234d1d94ba478cd95938492f1585d84fdc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:06:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:06:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c1c8408b7eac7706c8c390015049e5234d1d94ba478cd95938492f1585d84fdc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d2c43379bf83578b7069e3fcdd0de3bfdb8af29a020f2d49d3fbc8371b7fc3f"} {"level":"info","ts":"2026-07-10T19:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1c8408b7eac7706c8c390015049e5234d1d94ba478cd95938492f1585d84fdc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bcde3f55c52bf2dc7200e362a5cea63a3c1e58931a72b12cf51f660ef0770180","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:06:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:06:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1c8408b7eac7706c8c390015049e5234d1d94ba478cd95938492f1585d84fdc"} {"level":"info","ts":"2026-07-10T19:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bcde3f55c52bf2dc7200e362a5cea63a3c1e58931a72b12cf51f660ef0770180","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea1f273c4c5f5478a3ddc5174a962c67f938ecd32e7fe226023a16e75e719b68","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:06:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:06:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea1f273c4c5f5478a3ddc5174a962c67f938ecd32e7fe226023a16e75e719b68","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c1c8408b7eac7706c8c390015049e5234d1d94ba478cd95938492f1585d84fdc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bcde3f55c52bf2dc7200e362a5cea63a3c1e58931a72b12cf51f660ef0770180","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea1f273c4c5f5478a3ddc5174a962c67f938ecd32e7fe226023a16e75e719b68","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea1f273c4c5f5478a3ddc5174a962c67f938ecd32e7fe226023a16e75e719b68"} {"level":"debug","ts":"2026-07-10T19:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea1f273c4c5f5478a3ddc5174a962c67f938ecd32e7fe226023a16e75e719b68","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:06:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:06:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ea1f273c4c5f5478a3ddc5174a962c67f938ecd32e7fe226023a16e75e719b68"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea1f273c4c5f5478a3ddc5174a962c67f938ecd32e7fe226023a16e75e719b68","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bcde3f55c52bf2dc7200e362a5cea63a3c1e58931a72b12cf51f660ef0770180","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:06:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:06:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bcde3f55c52bf2dc7200e362a5cea63a3c1e58931a72b12cf51f660ef0770180"} {"level":"info","ts":"2026-07-10T19:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bcde3f55c52bf2dc7200e362a5cea63a3c1e58931a72b12cf51f660ef0770180","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea1f273c4c5f5478a3ddc5174a962c67f938ecd32e7fe226023a16e75e719b68","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bcde3f55c52bf2dc7200e362a5cea63a3c1e58931a72b12cf51f660ef0770180","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:06:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:06:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bcde3f55c52bf2dc7200e362a5cea63a3c1e58931a72b12cf51f660ef0770180"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bcde3f55c52bf2dc7200e362a5cea63a3c1e58931a72b12cf51f660ef0770180","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bcde3f55c52bf2dc7200e362a5cea63a3c1e58931a72b12cf51f660ef0770180","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1c8408b7eac7706c8c390015049e5234d1d94ba478cd95938492f1585d84fdc"} {"level":"debug","ts":"2026-07-10T19:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88abb69b0bb9fb4b761b5d646340d5c7067c0deccbb2d604c9d424c28721efba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:06:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:06:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88abb69b0bb9fb4b761b5d646340d5c7067c0deccbb2d604c9d424c28721efba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bcde3f55c52bf2dc7200e362a5cea63a3c1e58931a72b12cf51f660ef0770180","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88abb69b0bb9fb4b761b5d646340d5c7067c0deccbb2d604c9d424c28721efba","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea1f273c4c5f5478a3ddc5174a962c67f938ecd32e7fe226023a16e75e719b68"} {"level":"debug","ts":"2026-07-10T19:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88abb69b0bb9fb4b761b5d646340d5c7067c0deccbb2d604c9d424c28721efba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88abb69b0bb9fb4b761b5d646340d5c7067c0deccbb2d604c9d424c28721efba","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bcde3f55c52bf2dc7200e362a5cea63a3c1e58931a72b12cf51f660ef0770180"} {"level":"info","ts":"2026-07-10T19:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88abb69b0bb9fb4b761b5d646340d5c7067c0deccbb2d604c9d424c28721efba"} {"level":"debug","ts":"2026-07-10T19:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88abb69b0bb9fb4b761b5d646340d5c7067c0deccbb2d604c9d424c28721efba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:06:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:06:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["88abb69b0bb9fb4b761b5d646340d5c7067c0deccbb2d604c9d424c28721efba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88abb69b0bb9fb4b761b5d646340d5c7067c0deccbb2d604c9d424c28721efba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a42f9a5550c9c61991aeeb138136630ea86c1a803c8331b9411606cd03649d77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:06:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:06:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a42f9a5550c9c61991aeeb138136630ea86c1a803c8331b9411606cd03649d77","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88abb69b0bb9fb4b761b5d646340d5c7067c0deccbb2d604c9d424c28721efba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a42f9a5550c9c61991aeeb138136630ea86c1a803c8331b9411606cd03649d77","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a42f9a5550c9c61991aeeb138136630ea86c1a803c8331b9411606cd03649d77","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a42f9a5550c9c61991aeeb138136630ea86c1a803c8331b9411606cd03649d77"} {"level":"debug","ts":"2026-07-10T19:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a42f9a5550c9c61991aeeb138136630ea86c1a803c8331b9411606cd03649d77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:06:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:06:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a42f9a5550c9c61991aeeb138136630ea86c1a803c8331b9411606cd03649d77"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88abb69b0bb9fb4b761b5d646340d5c7067c0deccbb2d604c9d424c28721efba"} {"level":"info","ts":"2026-07-10T19:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a42f9a5550c9c61991aeeb138136630ea86c1a803c8331b9411606cd03649d77","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a42f9a5550c9c61991aeeb138136630ea86c1a803c8331b9411606cd03649d77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:06:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:06:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a42f9a5550c9c61991aeeb138136630ea86c1a803c8331b9411606cd03649d77"} {"level":"info","ts":"2026-07-10T19:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a42f9a5550c9c61991aeeb138136630ea86c1a803c8331b9411606cd03649d77","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a42f9a5550c9c61991aeeb138136630ea86c1a803c8331b9411606cd03649d77","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a42f9a5550c9c61991aeeb138136630ea86c1a803c8331b9411606cd03649d77","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a42f9a5550c9c61991aeeb138136630ea86c1a803c8331b9411606cd03649d77"} {"level":"debug","ts":"2026-07-10T19:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9bfc637a6a83c4b194839158e6f3a76e6ce779f29d8f75bf264072efa3261de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:06:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:06:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9bfc637a6a83c4b194839158e6f3a76e6ce779f29d8f75bf264072efa3261de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a42f9a5550c9c61991aeeb138136630ea86c1a803c8331b9411606cd03649d77","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9bfc637a6a83c4b194839158e6f3a76e6ce779f29d8f75bf264072efa3261de","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a42f9a5550c9c61991aeeb138136630ea86c1a803c8331b9411606cd03649d77"} {"level":"debug","ts":"2026-07-10T19:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9bfc637a6a83c4b194839158e6f3a76e6ce779f29d8f75bf264072efa3261de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:06:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:06:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9bfc637a6a83c4b194839158e6f3a76e6ce779f29d8f75bf264072efa3261de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9bfc637a6a83c4b194839158e6f3a76e6ce779f29d8f75bf264072efa3261de","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9bfc637a6a83c4b194839158e6f3a76e6ce779f29d8f75bf264072efa3261de"} {"level":"debug","ts":"2026-07-10T19:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9bfc637a6a83c4b194839158e6f3a76e6ce779f29d8f75bf264072efa3261de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a42f9a5550c9c61991aeeb138136630ea86c1a803c8331b9411606cd03649d77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:06:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:06:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a42f9a5550c9c61991aeeb138136630ea86c1a803c8331b9411606cd03649d77"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9bfc637a6a83c4b194839158e6f3a76e6ce779f29d8f75bf264072efa3261de"} {"level":"info","ts":"2026-07-10T19:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a42f9a5550c9c61991aeeb138136630ea86c1a803c8331b9411606cd03649d77","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a42f9a5550c9c61991aeeb138136630ea86c1a803c8331b9411606cd03649d77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:06:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:06:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a42f9a5550c9c61991aeeb138136630ea86c1a803c8331b9411606cd03649d77","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a42f9a5550c9c61991aeeb138136630ea86c1a803c8331b9411606cd03649d77","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a42f9a5550c9c61991aeeb138136630ea86c1a803c8331b9411606cd03649d77","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a42f9a5550c9c61991aeeb138136630ea86c1a803c8331b9411606cd03649d77"} {"level":"debug","ts":"2026-07-10T19:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37c2aac016442a0ea3af875455f9636f9678e55ab49194e7078ff69a97fcb0ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:06:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:06:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a42f9a5550c9c61991aeeb138136630ea86c1a803c8331b9411606cd03649d77"} {"level":"info","ts":"2026-07-10T19:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37c2aac016442a0ea3af875455f9636f9678e55ab49194e7078ff69a97fcb0ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a42f9a5550c9c61991aeeb138136630ea86c1a803c8331b9411606cd03649d77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:06:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:06:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a42f9a5550c9c61991aeeb138136630ea86c1a803c8331b9411606cd03649d77"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a42f9a5550c9c61991aeeb138136630ea86c1a803c8331b9411606cd03649d77","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37c2aac016442a0ea3af875455f9636f9678e55ab49194e7078ff69a97fcb0ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:06:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:06:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37c2aac016442a0ea3af875455f9636f9678e55ab49194e7078ff69a97fcb0ee"} {"level":"info","ts":"2026-07-10T19:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37c2aac016442a0ea3af875455f9636f9678e55ab49194e7078ff69a97fcb0ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a42f9a5550c9c61991aeeb138136630ea86c1a803c8331b9411606cd03649d77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:06:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:06:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a42f9a5550c9c61991aeeb138136630ea86c1a803c8331b9411606cd03649d77"} {"level":"info","ts":"2026-07-10T19:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a42f9a5550c9c61991aeeb138136630ea86c1a803c8331b9411606cd03649d77","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9bfc637a6a83c4b194839158e6f3a76e6ce779f29d8f75bf264072efa3261de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:06:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:06:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b9bfc637a6a83c4b194839158e6f3a76e6ce779f29d8f75bf264072efa3261de"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9bfc637a6a83c4b194839158e6f3a76e6ce779f29d8f75bf264072efa3261de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37c2aac016442a0ea3af875455f9636f9678e55ab49194e7078ff69a97fcb0ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a42f9a5550c9c61991aeeb138136630ea86c1a803c8331b9411606cd03649d77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:06:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:06:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a42f9a5550c9c61991aeeb138136630ea86c1a803c8331b9411606cd03649d77"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37c2aac016442a0ea3af875455f9636f9678e55ab49194e7078ff69a97fcb0ee"} {"level":"info","ts":"2026-07-10T19:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a42f9a5550c9c61991aeeb138136630ea86c1a803c8331b9411606cd03649d77","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9bfc637a6a83c4b194839158e6f3a76e6ce779f29d8f75bf264072efa3261de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a42f9a5550c9c61991aeeb138136630ea86c1a803c8331b9411606cd03649d77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:06:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:06:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a42f9a5550c9c61991aeeb138136630ea86c1a803c8331b9411606cd03649d77"} {"level":"info","ts":"2026-07-10T19:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a42f9a5550c9c61991aeeb138136630ea86c1a803c8331b9411606cd03649d77","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37c2aac016442a0ea3af875455f9636f9678e55ab49194e7078ff69a97fcb0ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:06:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:06:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["37c2aac016442a0ea3af875455f9636f9678e55ab49194e7078ff69a97fcb0ee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37c2aac016442a0ea3af875455f9636f9678e55ab49194e7078ff69a97fcb0ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a42f9a5550c9c61991aeeb138136630ea86c1a803c8331b9411606cd03649d77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:06:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:06:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a42f9a5550c9c61991aeeb138136630ea86c1a803c8331b9411606cd03649d77"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9bfc637a6a83c4b194839158e6f3a76e6ce779f29d8f75bf264072efa3261de"} {"level":"info","ts":"2026-07-10T19:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a42f9a5550c9c61991aeeb138136630ea86c1a803c8331b9411606cd03649d77"} {"level":"info","ts":"2026-07-10T19:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a42f9a5550c9c61991aeeb138136630ea86c1a803c8331b9411606cd03649d77","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b98d913fdb20d97566a5ccab87404150d4921648c0ec194b2bc706f90c80fee5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:06:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:06:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b98d913fdb20d97566a5ccab87404150d4921648c0ec194b2bc706f90c80fee5"} {"level":"info","ts":"2026-07-10T19:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37c2aac016442a0ea3af875455f9636f9678e55ab49194e7078ff69a97fcb0ee"} {"level":"info","ts":"2026-07-10T19:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b98d913fdb20d97566a5ccab87404150d4921648c0ec194b2bc706f90c80fee5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37c2aac016442a0ea3af875455f9636f9678e55ab49194e7078ff69a97fcb0ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a42f9a5550c9c61991aeeb138136630ea86c1a803c8331b9411606cd03649d77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:06:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:06:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a42f9a5550c9c61991aeeb138136630ea86c1a803c8331b9411606cd03649d77"} {"level":"info","ts":"2026-07-10T19:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b98d913fdb20d97566a5ccab87404150d4921648c0ec194b2bc706f90c80fee5"} {"level":"info","ts":"2026-07-10T19:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a42f9a5550c9c61991aeeb138136630ea86c1a803c8331b9411606cd03649d77","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b98d913fdb20d97566a5ccab87404150d4921648c0ec194b2bc706f90c80fee5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:06:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:06:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b98d913fdb20d97566a5ccab87404150d4921648c0ec194b2bc706f90c80fee5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a42f9a5550c9c61991aeeb138136630ea86c1a803c8331b9411606cd03649d77"} {"level":"info","ts":"2026-07-10T19:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b98d913fdb20d97566a5ccab87404150d4921648c0ec194b2bc706f90c80fee5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a42f9a5550c9c61991aeeb138136630ea86c1a803c8331b9411606cd03649d77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:06:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:06:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a42f9a5550c9c61991aeeb138136630ea86c1a803c8331b9411606cd03649d77"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b98d913fdb20d97566a5ccab87404150d4921648c0ec194b2bc706f90c80fee5"} {"level":"info","ts":"2026-07-10T19:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a42f9a5550c9c61991aeeb138136630ea86c1a803c8331b9411606cd03649d77","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b98d913fdb20d97566a5ccab87404150d4921648c0ec194b2bc706f90c80fee5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a42f9a5550c9c61991aeeb138136630ea86c1a803c8331b9411606cd03649d77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:06:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:06:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a42f9a5550c9c61991aeeb138136630ea86c1a803c8331b9411606cd03649d77"} {"level":"info","ts":"2026-07-10T19:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a42f9a5550c9c61991aeeb138136630ea86c1a803c8331b9411606cd03649d77","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a42f9a5550c9c61991aeeb138136630ea86c1a803c8331b9411606cd03649d77","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a42f9a5550c9c61991aeeb138136630ea86c1a803c8331b9411606cd03649d77","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a42f9a5550c9c61991aeeb138136630ea86c1a803c8331b9411606cd03649d77"} {"level":"debug","ts":"2026-07-10T19:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a42f9a5550c9c61991aeeb138136630ea86c1a803c8331b9411606cd03649d77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:06:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:06:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a42f9a5550c9c61991aeeb138136630ea86c1a803c8331b9411606cd03649d77"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a42f9a5550c9c61991aeeb138136630ea86c1a803c8331b9411606cd03649d77","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a42f9a5550c9c61991aeeb138136630ea86c1a803c8331b9411606cd03649d77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:06:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:06:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a42f9a5550c9c61991aeeb138136630ea86c1a803c8331b9411606cd03649d77"} {"level":"info","ts":"2026-07-10T19:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a42f9a5550c9c61991aeeb138136630ea86c1a803c8331b9411606cd03649d77","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a42f9a5550c9c61991aeeb138136630ea86c1a803c8331b9411606cd03649d77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:06:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:06:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a42f9a5550c9c61991aeeb138136630ea86c1a803c8331b9411606cd03649d77"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a42f9a5550c9c61991aeeb138136630ea86c1a803c8331b9411606cd03649d77"} {"level":"info","ts":"2026-07-10T19:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a42f9a5550c9c61991aeeb138136630ea86c1a803c8331b9411606cd03649d77","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a42f9a5550c9c61991aeeb138136630ea86c1a803c8331b9411606cd03649d77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:06:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:06:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a42f9a5550c9c61991aeeb138136630ea86c1a803c8331b9411606cd03649d77"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a42f9a5550c9c61991aeeb138136630ea86c1a803c8331b9411606cd03649d77"} {"level":"error","ts":"2026-07-10T19:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a42f9a5550c9c61991aeeb138136630ea86c1a803c8331b9411606cd03649d77","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a42f9a5550c9c61991aeeb138136630ea86c1a803c8331b9411606cd03649d77\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-10T19:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a42f9a5550c9c61991aeeb138136630ea86c1a803c8331b9411606cd03649d77","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a42f9a5550c9c61991aeeb138136630ea86c1a803c8331b9411606cd03649d77","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:06:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6d85ed33-3843-45ee-b517-d26ee288446e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.16:59074","PortSpecifier":{"PortValue":59074}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6d85ed33-3843-45ee-b517-d26ee288446e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-33ca20.apps.d363791c-37c4-4115-b4f0-e1034407046f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T19:06:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6d85ed33-3843-45ee-b517-d26ee288446e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.16:59074","PortSpecifier":{"PortValue":59074}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783710389,"nanos":200570467},"http":{"id":"6d85ed33-3843-45ee-b517-d26ee288446e","method":"POST","headers":{":authority":"e2e-shared-a-33ca20.apps.d363791c-37c4-4115-b4f0-e1034407046f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T19:06:29Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6d85ed33-3843-45ee-b517-d26ee288446e","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T19:06:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6d85ed33-3843-45ee-b517-d26ee288446e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6dd43bae-5856-4bf7-aa31-595588c0c7b9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f4bfb603-1d1c-4dfe-aa58-2bd1826c9b75"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e1034407046f"]}} {"level":"debug","ts":"2026-07-10T19:06:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6d85ed33-3843-45ee-b517-d26ee288446e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e1034407046f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f4bfb603-1d1c-4dfe-aa58-2bd1826c9b75"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6dd43bae-5856-4bf7-aa31-595588c0c7b9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"dfe8ef1a9af1a1204ec43304f443a5ef3a6e3fe57a18deb1e094e93f15b7548d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-33ca20.apps.d363791c-37c4-4115-b4f0-e1034407046f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T19:06:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6d85ed33-3843-45ee-b517-d26ee288446e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T19:06:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6d85ed33-3843-45ee-b517-d26ee288446e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T19:06:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6d85ed33-3843-45ee-b517-d26ee288446e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-33ca20/auth-test-model-33ca20\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T19:06:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6d85ed33-3843-45ee-b517-d26ee288446e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T19:06:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6d85ed33-3843-45ee-b517-d26ee288446e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T19:06:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6d85ed33-3843-45ee-b517-d26ee288446e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T19:06:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6d85ed33-3843-45ee-b517-d26ee288446e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T19:06:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6d85ed33-3843-45ee-b517-d26ee288446e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T19:06:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"65c954b4-cc21-4c38-a771-d268626df359","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.16:41518","PortSpecifier":{"PortValue":41518}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"65c954b4-cc21-4c38-a771-d268626df359","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-7b46a3.apps.d363791c-37c4-4115-b4f0-e1034407046f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T19:06:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"65c954b4-cc21-4c38-a771-d268626df359","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.16:41518","PortSpecifier":{"PortValue":41518}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783710389,"nanos":264107521},"http":{"id":"65c954b4-cc21-4c38-a771-d268626df359","method":"POST","headers":{":authority":"e2e-shared-b-7b46a3.apps.d363791c-37c4-4115-b4f0-e1034407046f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T19:06:29Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"65c954b4-cc21-4c38-a771-d268626df359","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T19:06:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"65c954b4-cc21-4c38-a771-d268626df359","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6dd43bae-5856-4bf7-aa31-595588c0c7b9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f4bfb603-1d1c-4dfe-aa58-2bd1826c9b75"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e1034407046f"]}} {"level":"debug","ts":"2026-07-10T19:06:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"65c954b4-cc21-4c38-a771-d268626df359","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e1034407046f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f4bfb603-1d1c-4dfe-aa58-2bd1826c9b75"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6dd43bae-5856-4bf7-aa31-595588c0c7b9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"35322e841f878a999b9fb319d53b4ede55fab1a3f4e612b55f96e99b3dae2210"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-7b46a3.apps.d363791c-37c4-4115-b4f0-e1034407046f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T19:06:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"65c954b4-cc21-4c38-a771-d268626df359","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T19:06:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"65c954b4-cc21-4c38-a771-d268626df359","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T19:06:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"65c954b4-cc21-4c38-a771-d268626df359","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-7b46a3/auth-test-model-7b46a3\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T19:06:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"65c954b4-cc21-4c38-a771-d268626df359","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T19:06:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"65c954b4-cc21-4c38-a771-d268626df359","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-10T19:06:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"65c954b4-cc21-4c38-a771-d268626df359","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-10T19:06:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"65c954b4-cc21-4c38-a771-d268626df359","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T19:06:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"65c954b4-cc21-4c38-a771-d268626df359","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T19:06:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7a33c9d3-008c-4126-b12a-fd18e5c6819e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.16:59086","PortSpecifier":{"PortValue":59086}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7a33c9d3-008c-4126-b12a-fd18e5c6819e","method":"GET","path":"/maas-api/v1/api-keys/e6d9ff15-ab4d-47e3-a43c-9df97a96d21c","host":"e2e-shared-a-33ca20.apps.d363791c-37c4-4115-b4f0-e1034407046f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T19:06:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7a33c9d3-008c-4126-b12a-fd18e5c6819e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.16:59086","PortSpecifier":{"PortValue":59086}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783710389,"nanos":320034668},"http":{"id":"7a33c9d3-008c-4126-b12a-fd18e5c6819e","method":"GET","headers":{":authority":"e2e-shared-a-33ca20.apps.d363791c-37c4-4115-b4f0-e1034407046f.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/e6d9ff15-ab4d-47e3-a43c-9df97a96d21c",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T19:06:29Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7a33c9d3-008c-4126-b12a-fd18e5c6819e","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T19:06:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7a33c9d3-008c-4126-b12a-fd18e5c6819e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6dd43bae-5856-4bf7-aa31-595588c0c7b9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f4bfb603-1d1c-4dfe-aa58-2bd1826c9b75"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e1034407046f"]}} {"level":"debug","ts":"2026-07-10T19:06:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7a33c9d3-008c-4126-b12a-fd18e5c6819e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e1034407046f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f4bfb603-1d1c-4dfe-aa58-2bd1826c9b75"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6dd43bae-5856-4bf7-aa31-595588c0c7b9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"dfe8ef1a9af1a1204ec43304f443a5ef3a6e3fe57a18deb1e094e93f15b7548d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-33ca20.apps.d363791c-37c4-4115-b4f0-e1034407046f.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/e6d9ff15-ab4d-47e3-a43c-9df97a96d21c",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T19:06:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7a33c9d3-008c-4126-b12a-fd18e5c6819e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T19:06:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7a33c9d3-008c-4126-b12a-fd18e5c6819e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T19:06:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7a33c9d3-008c-4126-b12a-fd18e5c6819e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-33ca20/auth-test-model-33ca20\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T19:06:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7a33c9d3-008c-4126-b12a-fd18e5c6819e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T19:06:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7a33c9d3-008c-4126-b12a-fd18e5c6819e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T19:06:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7a33c9d3-008c-4126-b12a-fd18e5c6819e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T19:06:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7a33c9d3-008c-4126-b12a-fd18e5c6819e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T19:06:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7a33c9d3-008c-4126-b12a-fd18e5c6819e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T19:06:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ad30a44a-cfb5-44aa-85f6-1b4bf54fd106","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.16:41532","PortSpecifier":{"PortValue":41532}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ad30a44a-cfb5-44aa-85f6-1b4bf54fd106","method":"GET","path":"/maas-api/v1/api-keys/9baef8c6-3e9b-484b-9d21-d827aaf8dfb5","host":"e2e-shared-b-7b46a3.apps.d363791c-37c4-4115-b4f0-e1034407046f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T19:06:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ad30a44a-cfb5-44aa-85f6-1b4bf54fd106","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.16:41532","PortSpecifier":{"PortValue":41532}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783710389,"nanos":351873183},"http":{"id":"ad30a44a-cfb5-44aa-85f6-1b4bf54fd106","method":"GET","headers":{":authority":"e2e-shared-b-7b46a3.apps.d363791c-37c4-4115-b4f0-e1034407046f.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/9baef8c6-3e9b-484b-9d21-d827aaf8dfb5",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T19:06:29Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ad30a44a-cfb5-44aa-85f6-1b4bf54fd106","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T19:06:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ad30a44a-cfb5-44aa-85f6-1b4bf54fd106","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6dd43bae-5856-4bf7-aa31-595588c0c7b9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f4bfb603-1d1c-4dfe-aa58-2bd1826c9b75"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e1034407046f"]}} {"level":"debug","ts":"2026-07-10T19:06:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ad30a44a-cfb5-44aa-85f6-1b4bf54fd106","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e1034407046f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f4bfb603-1d1c-4dfe-aa58-2bd1826c9b75"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6dd43bae-5856-4bf7-aa31-595588c0c7b9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"35322e841f878a999b9fb319d53b4ede55fab1a3f4e612b55f96e99b3dae2210"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-7b46a3.apps.d363791c-37c4-4115-b4f0-e1034407046f.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/9baef8c6-3e9b-484b-9d21-d827aaf8dfb5",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T19:06:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ad30a44a-cfb5-44aa-85f6-1b4bf54fd106","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T19:06:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ad30a44a-cfb5-44aa-85f6-1b4bf54fd106","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T19:06:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ad30a44a-cfb5-44aa-85f6-1b4bf54fd106","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-7b46a3/auth-test-model-7b46a3\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T19:06:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ad30a44a-cfb5-44aa-85f6-1b4bf54fd106","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T19:06:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ad30a44a-cfb5-44aa-85f6-1b4bf54fd106","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-10T19:06:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ad30a44a-cfb5-44aa-85f6-1b4bf54fd106","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-10T19:06:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ad30a44a-cfb5-44aa-85f6-1b4bf54fd106","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T19:06:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ad30a44a-cfb5-44aa-85f6-1b4bf54fd106","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T19:06:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3f52363b-c793-48e2-b95d-c272fb7427ea","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.16:57516","PortSpecifier":{"PortValue":57516}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3f52363b-c793-48e2-b95d-c272fb7427ea","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-33ca20.apps.d363791c-37c4-4115-b4f0-e1034407046f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T19:06:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3f52363b-c793-48e2-b95d-c272fb7427ea","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.16:57516","PortSpecifier":{"PortValue":57516}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783710406,"nanos":304171268},"http":{"id":"3f52363b-c793-48e2-b95d-c272fb7427ea","method":"POST","headers":{":authority":"e2e-shared-a-33ca20.apps.d363791c-37c4-4115-b4f0-e1034407046f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T19:06:46Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3f52363b-c793-48e2-b95d-c272fb7427ea","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T19:06:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3f52363b-c793-48e2-b95d-c272fb7427ea","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6dd43bae-5856-4bf7-aa31-595588c0c7b9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f4bfb603-1d1c-4dfe-aa58-2bd1826c9b75"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e1034407046f"]}} {"level":"debug","ts":"2026-07-10T19:06:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3f52363b-c793-48e2-b95d-c272fb7427ea","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e1034407046f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f4bfb603-1d1c-4dfe-aa58-2bd1826c9b75"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6dd43bae-5856-4bf7-aa31-595588c0c7b9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"dfe8ef1a9af1a1204ec43304f443a5ef3a6e3fe57a18deb1e094e93f15b7548d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-33ca20.apps.d363791c-37c4-4115-b4f0-e1034407046f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T19:06:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3f52363b-c793-48e2-b95d-c272fb7427ea","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T19:06:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3f52363b-c793-48e2-b95d-c272fb7427ea","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T19:06:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3f52363b-c793-48e2-b95d-c272fb7427ea","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-33ca20/auth-test-model-33ca20\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T19:06:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3f52363b-c793-48e2-b95d-c272fb7427ea","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T19:06:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3f52363b-c793-48e2-b95d-c272fb7427ea","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T19:06:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3f52363b-c793-48e2-b95d-c272fb7427ea","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T19:06:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3f52363b-c793-48e2-b95d-c272fb7427ea","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T19:06:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3f52363b-c793-48e2-b95d-c272fb7427ea","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T19:06:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"122b5742-4704-47f1-87a2-419fd9308ca2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.16:58074","PortSpecifier":{"PortValue":58074}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"122b5742-4704-47f1-87a2-419fd9308ca2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-7b46a3.apps.d363791c-37c4-4115-b4f0-e1034407046f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T19:06:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"122b5742-4704-47f1-87a2-419fd9308ca2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.16:58074","PortSpecifier":{"PortValue":58074}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783710406,"nanos":347393161},"http":{"id":"122b5742-4704-47f1-87a2-419fd9308ca2","method":"POST","headers":{":authority":"e2e-shared-b-7b46a3.apps.d363791c-37c4-4115-b4f0-e1034407046f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T19:06:46Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"122b5742-4704-47f1-87a2-419fd9308ca2","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T19:06:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"122b5742-4704-47f1-87a2-419fd9308ca2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6dd43bae-5856-4bf7-aa31-595588c0c7b9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f4bfb603-1d1c-4dfe-aa58-2bd1826c9b75"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e1034407046f"]}} {"level":"debug","ts":"2026-07-10T19:06:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"122b5742-4704-47f1-87a2-419fd9308ca2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e1034407046f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f4bfb603-1d1c-4dfe-aa58-2bd1826c9b75"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6dd43bae-5856-4bf7-aa31-595588c0c7b9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"35322e841f878a999b9fb319d53b4ede55fab1a3f4e612b55f96e99b3dae2210"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-7b46a3.apps.d363791c-37c4-4115-b4f0-e1034407046f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T19:06:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"122b5742-4704-47f1-87a2-419fd9308ca2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T19:06:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"122b5742-4704-47f1-87a2-419fd9308ca2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T19:06:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"122b5742-4704-47f1-87a2-419fd9308ca2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-7b46a3/auth-test-model-7b46a3\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T19:06:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"122b5742-4704-47f1-87a2-419fd9308ca2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T19:06:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"122b5742-4704-47f1-87a2-419fd9308ca2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T19:06:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"122b5742-4704-47f1-87a2-419fd9308ca2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T19:06:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"122b5742-4704-47f1-87a2-419fd9308ca2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T19:06:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"122b5742-4704-47f1-87a2-419fd9308ca2","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T19:06:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8c298e03-7a6e-4d4a-850b-c85d98bed8ef","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.16:57518","PortSpecifier":{"PortValue":57518}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8c298e03-7a6e-4d4a-850b-c85d98bed8ef","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-33ca20.apps.d363791c-37c4-4115-b4f0-e1034407046f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T19:06:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8c298e03-7a6e-4d4a-850b-c85d98bed8ef","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.16:57518","PortSpecifier":{"PortValue":57518}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783710406,"nanos":386720698},"http":{"id":"8c298e03-7a6e-4d4a-850b-c85d98bed8ef","method":"GET","headers":{":authority":"e2e-shared-a-33ca20.apps.d363791c-37c4-4115-b4f0-e1034407046f.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T19:06:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8c298e03-7a6e-4d4a-850b-c85d98bed8ef","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1SQOSiuGMFj5eiRC7_7mmIiGgRZuktAmKV8cAolgVDQFDJU5EC3rNjKm70Stq"} {"level":"debug","ts":"2026-07-10T19:06:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8c298e03-7a6e-4d4a-850b-c85d98bed8ef","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-33ca20.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1SQOSiuGMFj5eiRC7_7mmIiGgRZuktAmKV8cAolgVDQFDJU5EC3rNjKm70Stq\"}"} {"level":"debug","ts":"2026-07-10T19:06:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8c298e03-7a6e-4d4a-850b-c85d98bed8ef","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-33ca20.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"85ecbd6d-4007-4f05-930c-dcd84e57e4cd","keyName":"e2e-auth-iso-a-c5dcd6","subscription":"e2e-auth-iso-6f460b","tenant":"e2e-shared-a-33ca20","userId":"85ecbd6d-4007-4f05-930c-dcd84e57e4cd","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-10T19:06:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8c298e03-7a6e-4d4a-850b-c85d98bed8ef","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T19:06:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8c298e03-7a6e-4d4a-850b-c85d98bed8ef","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T19:06:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8c298e03-7a6e-4d4a-850b-c85d98bed8ef","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T19:06:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8c298e03-7a6e-4d4a-850b-c85d98bed8ef","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-33ca20/auth-test-model-33ca20\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T19:06:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8c298e03-7a6e-4d4a-850b-c85d98bed8ef","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-10T19:06:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8c298e03-7a6e-4d4a-850b-c85d98bed8ef","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T19:06:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8c298e03-7a6e-4d4a-850b-c85d98bed8ef","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-6f460b"} {"level":"debug","ts":"2026-07-10T19:06:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8c298e03-7a6e-4d4a-850b-c85d98bed8ef","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T19:06:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8c298e03-7a6e-4d4a-850b-c85d98bed8ef","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T19:06:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8c298e03-7a6e-4d4a-850b-c85d98bed8ef","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T19:07:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"18795cf9-b5f5-40f9-b91c-3b7d4eeb75e7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.16:47396","PortSpecifier":{"PortValue":47396}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"18795cf9-b5f5-40f9-b91c-3b7d4eeb75e7","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-33ca20.apps.d363791c-37c4-4115-b4f0-e1034407046f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T19:07:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"18795cf9-b5f5-40f9-b91c-3b7d4eeb75e7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.16:47396","PortSpecifier":{"PortValue":47396}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783710423,"nanos":336306435},"http":{"id":"18795cf9-b5f5-40f9-b91c-3b7d4eeb75e7","method":"POST","headers":{":authority":"e2e-shared-a-33ca20.apps.d363791c-37c4-4115-b4f0-e1034407046f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T19:07:03Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"18795cf9-b5f5-40f9-b91c-3b7d4eeb75e7","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T19:07:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"18795cf9-b5f5-40f9-b91c-3b7d4eeb75e7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6dd43bae-5856-4bf7-aa31-595588c0c7b9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f4bfb603-1d1c-4dfe-aa58-2bd1826c9b75"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e1034407046f"]}} {"level":"debug","ts":"2026-07-10T19:07:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"18795cf9-b5f5-40f9-b91c-3b7d4eeb75e7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e1034407046f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f4bfb603-1d1c-4dfe-aa58-2bd1826c9b75"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6dd43bae-5856-4bf7-aa31-595588c0c7b9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"dfe8ef1a9af1a1204ec43304f443a5ef3a6e3fe57a18deb1e094e93f15b7548d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-33ca20.apps.d363791c-37c4-4115-b4f0-e1034407046f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T19:07:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"18795cf9-b5f5-40f9-b91c-3b7d4eeb75e7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T19:07:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"18795cf9-b5f5-40f9-b91c-3b7d4eeb75e7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T19:07:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"18795cf9-b5f5-40f9-b91c-3b7d4eeb75e7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-33ca20/auth-test-model-33ca20\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T19:07:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"18795cf9-b5f5-40f9-b91c-3b7d4eeb75e7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T19:07:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"18795cf9-b5f5-40f9-b91c-3b7d4eeb75e7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T19:07:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"18795cf9-b5f5-40f9-b91c-3b7d4eeb75e7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T19:07:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"18795cf9-b5f5-40f9-b91c-3b7d4eeb75e7","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T19:07:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"18795cf9-b5f5-40f9-b91c-3b7d4eeb75e7","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T19:07:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a5c6c3d5-59bd-4dd9-b221-59dc32251ba4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.16:59812","PortSpecifier":{"PortValue":59812}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a5c6c3d5-59bd-4dd9-b221-59dc32251ba4","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-7b46a3.apps.d363791c-37c4-4115-b4f0-e1034407046f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T19:07:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a5c6c3d5-59bd-4dd9-b221-59dc32251ba4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.16:59812","PortSpecifier":{"PortValue":59812}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783710423,"nanos":374561986},"http":{"id":"a5c6c3d5-59bd-4dd9-b221-59dc32251ba4","method":"POST","headers":{":authority":"e2e-shared-b-7b46a3.apps.d363791c-37c4-4115-b4f0-e1034407046f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T19:07:03Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a5c6c3d5-59bd-4dd9-b221-59dc32251ba4","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T19:07:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a5c6c3d5-59bd-4dd9-b221-59dc32251ba4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6dd43bae-5856-4bf7-aa31-595588c0c7b9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f4bfb603-1d1c-4dfe-aa58-2bd1826c9b75"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e1034407046f"]}} {"level":"debug","ts":"2026-07-10T19:07:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a5c6c3d5-59bd-4dd9-b221-59dc32251ba4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e1034407046f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f4bfb603-1d1c-4dfe-aa58-2bd1826c9b75"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6dd43bae-5856-4bf7-aa31-595588c0c7b9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"35322e841f878a999b9fb319d53b4ede55fab1a3f4e612b55f96e99b3dae2210"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-7b46a3.apps.d363791c-37c4-4115-b4f0-e1034407046f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T19:07:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a5c6c3d5-59bd-4dd9-b221-59dc32251ba4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T19:07:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a5c6c3d5-59bd-4dd9-b221-59dc32251ba4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T19:07:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a5c6c3d5-59bd-4dd9-b221-59dc32251ba4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-7b46a3/auth-test-model-7b46a3\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T19:07:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a5c6c3d5-59bd-4dd9-b221-59dc32251ba4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T19:07:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a5c6c3d5-59bd-4dd9-b221-59dc32251ba4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T19:07:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a5c6c3d5-59bd-4dd9-b221-59dc32251ba4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T19:07:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a5c6c3d5-59bd-4dd9-b221-59dc32251ba4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T19:07:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a5c6c3d5-59bd-4dd9-b221-59dc32251ba4","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T19:07:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fea8238e-d078-4abe-80a0-8355c7f6cd13","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.16:59828","PortSpecifier":{"PortValue":59828}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fea8238e-d078-4abe-80a0-8355c7f6cd13","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-7b46a3.apps.d363791c-37c4-4115-b4f0-e1034407046f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T19:07:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fea8238e-d078-4abe-80a0-8355c7f6cd13","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.16:59828","PortSpecifier":{"PortValue":59828}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783710423,"nanos":407024632},"http":{"id":"fea8238e-d078-4abe-80a0-8355c7f6cd13","method":"GET","headers":{":authority":"e2e-shared-b-7b46a3.apps.d363791c-37c4-4115-b4f0-e1034407046f.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T19:07:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fea8238e-d078-4abe-80a0-8355c7f6cd13","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1M19Xt0ThET1x3Sic_lcRQWIjEiG1Z5oWVcA2yUnV1KKHXjVHqjrlOYuEfex5"} {"level":"debug","ts":"2026-07-10T19:07:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fea8238e-d078-4abe-80a0-8355c7f6cd13","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-7b46a3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1M19Xt0ThET1x3Sic_lcRQWIjEiG1Z5oWVcA2yUnV1KKHXjVHqjrlOYuEfex5\"}"} {"level":"debug","ts":"2026-07-10T19:07:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fea8238e-d078-4abe-80a0-8355c7f6cd13","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-7b46a3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}} {"level":"debug","ts":"2026-07-10T19:07:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fea8238e-d078-4abe-80a0-8355c7f6cd13","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"35322e841f878a999b9fb319d53b4ede55fab1a3f4e612b55f96e99b3dae2210"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-7b46a3.apps.d363791c-37c4-4115-b4f0-e1034407046f.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T19:07:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fea8238e-d078-4abe-80a0-8355c7f6cd13","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T19:07:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"fea8238e-d078-4abe-80a0-8355c7f6cd13","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"} {"level":"info","ts":"2026-07-10T19:07:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fea8238e-d078-4abe-80a0-8355c7f6cd13","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}} {"level":"debug","ts":"2026-07-10T19:07:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fea8238e-d078-4abe-80a0-8355c7f6cd13","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}} {"level":"info","ts":"2026-07-10T19:07:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"deea0f0c-7fea-467a-a0bb-3404a285d0d4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.16:59316","PortSpecifier":{"PortValue":59316}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"deea0f0c-7fea-467a-a0bb-3404a285d0d4","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-33ca20.apps.d363791c-37c4-4115-b4f0-e1034407046f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T19:07:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"deea0f0c-7fea-467a-a0bb-3404a285d0d4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.16:59316","PortSpecifier":{"PortValue":59316}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783710442,"nanos":495129717},"http":{"id":"deea0f0c-7fea-467a-a0bb-3404a285d0d4","method":"POST","headers":{":authority":"e2e-shared-a-33ca20.apps.d363791c-37c4-4115-b4f0-e1034407046f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T19:07:22Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"deea0f0c-7fea-467a-a0bb-3404a285d0d4","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T19:07:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"deea0f0c-7fea-467a-a0bb-3404a285d0d4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6dd43bae-5856-4bf7-aa31-595588c0c7b9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f4bfb603-1d1c-4dfe-aa58-2bd1826c9b75"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e1034407046f"]}} {"level":"debug","ts":"2026-07-10T19:07:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"deea0f0c-7fea-467a-a0bb-3404a285d0d4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e1034407046f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f4bfb603-1d1c-4dfe-aa58-2bd1826c9b75"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6dd43bae-5856-4bf7-aa31-595588c0c7b9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"dfe8ef1a9af1a1204ec43304f443a5ef3a6e3fe57a18deb1e094e93f15b7548d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-33ca20.apps.d363791c-37c4-4115-b4f0-e1034407046f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T19:07:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"deea0f0c-7fea-467a-a0bb-3404a285d0d4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T19:07:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"deea0f0c-7fea-467a-a0bb-3404a285d0d4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T19:07:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"deea0f0c-7fea-467a-a0bb-3404a285d0d4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-33ca20/auth-test-model-33ca20\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T19:07:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"deea0f0c-7fea-467a-a0bb-3404a285d0d4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T19:07:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"deea0f0c-7fea-467a-a0bb-3404a285d0d4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T19:07:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"deea0f0c-7fea-467a-a0bb-3404a285d0d4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T19:07:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"deea0f0c-7fea-467a-a0bb-3404a285d0d4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T19:07:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"deea0f0c-7fea-467a-a0bb-3404a285d0d4","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T19:07:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ff3c4ea2-15e3-41c0-9b1a-fd72fc825493","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.16:34576","PortSpecifier":{"PortValue":34576}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ff3c4ea2-15e3-41c0-9b1a-fd72fc825493","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-7b46a3.apps.d363791c-37c4-4115-b4f0-e1034407046f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T19:07:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ff3c4ea2-15e3-41c0-9b1a-fd72fc825493","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.16:34576","PortSpecifier":{"PortValue":34576}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783710442,"nanos":532809364},"http":{"id":"ff3c4ea2-15e3-41c0-9b1a-fd72fc825493","method":"POST","headers":{":authority":"e2e-shared-b-7b46a3.apps.d363791c-37c4-4115-b4f0-e1034407046f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T19:07:22Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ff3c4ea2-15e3-41c0-9b1a-fd72fc825493","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T19:07:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ff3c4ea2-15e3-41c0-9b1a-fd72fc825493","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6dd43bae-5856-4bf7-aa31-595588c0c7b9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f4bfb603-1d1c-4dfe-aa58-2bd1826c9b75"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e1034407046f"]}} {"level":"debug","ts":"2026-07-10T19:07:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ff3c4ea2-15e3-41c0-9b1a-fd72fc825493","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e1034407046f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f4bfb603-1d1c-4dfe-aa58-2bd1826c9b75"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6dd43bae-5856-4bf7-aa31-595588c0c7b9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"35322e841f878a999b9fb319d53b4ede55fab1a3f4e612b55f96e99b3dae2210"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-7b46a3.apps.d363791c-37c4-4115-b4f0-e1034407046f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T19:07:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ff3c4ea2-15e3-41c0-9b1a-fd72fc825493","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T19:07:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ff3c4ea2-15e3-41c0-9b1a-fd72fc825493","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-7b46a3/auth-test-model-7b46a3\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T19:07:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ff3c4ea2-15e3-41c0-9b1a-fd72fc825493","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T19:07:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ff3c4ea2-15e3-41c0-9b1a-fd72fc825493","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T19:07:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ff3c4ea2-15e3-41c0-9b1a-fd72fc825493","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-10T19:07:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ff3c4ea2-15e3-41c0-9b1a-fd72fc825493","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-10T19:07:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ff3c4ea2-15e3-41c0-9b1a-fd72fc825493","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T19:07:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ff3c4ea2-15e3-41c0-9b1a-fd72fc825493","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T19:07:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d4aea7ed-7376-4573-8a4d-e87ba36b2f3e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.16:59330","PortSpecifier":{"PortValue":59330}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d4aea7ed-7376-4573-8a4d-e87ba36b2f3e","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-33ca20.apps.d363791c-37c4-4115-b4f0-e1034407046f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T19:07:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d4aea7ed-7376-4573-8a4d-e87ba36b2f3e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.16:59330","PortSpecifier":{"PortValue":59330}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783710442,"nanos":567297405},"http":{"id":"d4aea7ed-7376-4573-8a4d-e87ba36b2f3e","method":"POST","headers":{":authority":"e2e-shared-a-33ca20.apps.d363791c-37c4-4115-b4f0-e1034407046f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T19:07:22Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d4aea7ed-7376-4573-8a4d-e87ba36b2f3e","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T19:07:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d4aea7ed-7376-4573-8a4d-e87ba36b2f3e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6dd43bae-5856-4bf7-aa31-595588c0c7b9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f4bfb603-1d1c-4dfe-aa58-2bd1826c9b75"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e1034407046f"]}} {"level":"debug","ts":"2026-07-10T19:07:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d4aea7ed-7376-4573-8a4d-e87ba36b2f3e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e1034407046f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f4bfb603-1d1c-4dfe-aa58-2bd1826c9b75"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6dd43bae-5856-4bf7-aa31-595588c0c7b9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"dfe8ef1a9af1a1204ec43304f443a5ef3a6e3fe57a18deb1e094e93f15b7548d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-33ca20.apps.d363791c-37c4-4115-b4f0-e1034407046f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T19:07:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d4aea7ed-7376-4573-8a4d-e87ba36b2f3e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T19:07:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d4aea7ed-7376-4573-8a4d-e87ba36b2f3e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T19:07:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d4aea7ed-7376-4573-8a4d-e87ba36b2f3e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-33ca20/auth-test-model-33ca20\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T19:07:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d4aea7ed-7376-4573-8a4d-e87ba36b2f3e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T19:07:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d4aea7ed-7376-4573-8a4d-e87ba36b2f3e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-10T19:07:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d4aea7ed-7376-4573-8a4d-e87ba36b2f3e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-10T19:07:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d4aea7ed-7376-4573-8a4d-e87ba36b2f3e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T19:07:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d4aea7ed-7376-4573-8a4d-e87ba36b2f3e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T19:07:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d62e95fd-7044-4081-ab4d-f0b8173a05ee","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.16:34588","PortSpecifier":{"PortValue":34588}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d62e95fd-7044-4081-ab4d-f0b8173a05ee","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-7b46a3.apps.d363791c-37c4-4115-b4f0-e1034407046f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T19:07:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d62e95fd-7044-4081-ab4d-f0b8173a05ee","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.16:34588","PortSpecifier":{"PortValue":34588}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783710442,"nanos":602661269},"http":{"id":"d62e95fd-7044-4081-ab4d-f0b8173a05ee","method":"POST","headers":{":authority":"e2e-shared-b-7b46a3.apps.d363791c-37c4-4115-b4f0-e1034407046f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T19:07:22Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d62e95fd-7044-4081-ab4d-f0b8173a05ee","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T19:07:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d62e95fd-7044-4081-ab4d-f0b8173a05ee","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6dd43bae-5856-4bf7-aa31-595588c0c7b9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f4bfb603-1d1c-4dfe-aa58-2bd1826c9b75"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e1034407046f"]}} {"level":"debug","ts":"2026-07-10T19:07:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d62e95fd-7044-4081-ab4d-f0b8173a05ee","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e1034407046f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f4bfb603-1d1c-4dfe-aa58-2bd1826c9b75"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6dd43bae-5856-4bf7-aa31-595588c0c7b9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"35322e841f878a999b9fb319d53b4ede55fab1a3f4e612b55f96e99b3dae2210"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-7b46a3.apps.d363791c-37c4-4115-b4f0-e1034407046f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T19:07:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d62e95fd-7044-4081-ab4d-f0b8173a05ee","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T19:07:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d62e95fd-7044-4081-ab4d-f0b8173a05ee","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T19:07:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d62e95fd-7044-4081-ab4d-f0b8173a05ee","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-7b46a3/auth-test-model-7b46a3\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T19:07:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d62e95fd-7044-4081-ab4d-f0b8173a05ee","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T19:07:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d62e95fd-7044-4081-ab4d-f0b8173a05ee","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-10T19:07:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d62e95fd-7044-4081-ab4d-f0b8173a05ee","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-10T19:07:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d62e95fd-7044-4081-ab4d-f0b8173a05ee","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T19:07:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d62e95fd-7044-4081-ab4d-f0b8173a05ee","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T19:07:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"19b33695-31bb-4be1-a9d1-0956f40d5286","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.16:46906","PortSpecifier":{"PortValue":46906}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"19b33695-31bb-4be1-a9d1-0956f40d5286","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-33ca20.apps.d363791c-37c4-4115-b4f0-e1034407046f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T19:07:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"19b33695-31bb-4be1-a9d1-0956f40d5286","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.16:46906","PortSpecifier":{"PortValue":46906}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783710459,"nanos":560392147},"http":{"id":"19b33695-31bb-4be1-a9d1-0956f40d5286","method":"POST","headers":{":authority":"e2e-shared-a-33ca20.apps.d363791c-37c4-4115-b4f0-e1034407046f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T19:07:39Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"19b33695-31bb-4be1-a9d1-0956f40d5286","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T19:07:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"19b33695-31bb-4be1-a9d1-0956f40d5286","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6dd43bae-5856-4bf7-aa31-595588c0c7b9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f4bfb603-1d1c-4dfe-aa58-2bd1826c9b75"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e1034407046f"]}} {"level":"debug","ts":"2026-07-10T19:07:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"19b33695-31bb-4be1-a9d1-0956f40d5286","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e1034407046f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f4bfb603-1d1c-4dfe-aa58-2bd1826c9b75"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6dd43bae-5856-4bf7-aa31-595588c0c7b9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"dfe8ef1a9af1a1204ec43304f443a5ef3a6e3fe57a18deb1e094e93f15b7548d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-33ca20.apps.d363791c-37c4-4115-b4f0-e1034407046f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T19:07:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"19b33695-31bb-4be1-a9d1-0956f40d5286","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T19:07:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"19b33695-31bb-4be1-a9d1-0956f40d5286","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T19:07:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"19b33695-31bb-4be1-a9d1-0956f40d5286","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-33ca20/auth-test-model-33ca20\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T19:07:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"19b33695-31bb-4be1-a9d1-0956f40d5286","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T19:07:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"19b33695-31bb-4be1-a9d1-0956f40d5286","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T19:07:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"19b33695-31bb-4be1-a9d1-0956f40d5286","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T19:07:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"19b33695-31bb-4be1-a9d1-0956f40d5286","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T19:07:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"19b33695-31bb-4be1-a9d1-0956f40d5286","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T19:07:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"53938734-7e93-4460-aa3d-5d373c93bd74","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.16:59964","PortSpecifier":{"PortValue":59964}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"53938734-7e93-4460-aa3d-5d373c93bd74","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-7b46a3.apps.d363791c-37c4-4115-b4f0-e1034407046f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T19:07:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"53938734-7e93-4460-aa3d-5d373c93bd74","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.16:59964","PortSpecifier":{"PortValue":59964}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783710459,"nanos":592389140},"http":{"id":"53938734-7e93-4460-aa3d-5d373c93bd74","method":"POST","headers":{":authority":"e2e-shared-b-7b46a3.apps.d363791c-37c4-4115-b4f0-e1034407046f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T19:07:39Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"53938734-7e93-4460-aa3d-5d373c93bd74","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T19:07:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"53938734-7e93-4460-aa3d-5d373c93bd74","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6dd43bae-5856-4bf7-aa31-595588c0c7b9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f4bfb603-1d1c-4dfe-aa58-2bd1826c9b75"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e1034407046f"]}} {"level":"debug","ts":"2026-07-10T19:07:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"53938734-7e93-4460-aa3d-5d373c93bd74","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e1034407046f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f4bfb603-1d1c-4dfe-aa58-2bd1826c9b75"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6dd43bae-5856-4bf7-aa31-595588c0c7b9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"35322e841f878a999b9fb319d53b4ede55fab1a3f4e612b55f96e99b3dae2210"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-7b46a3.apps.d363791c-37c4-4115-b4f0-e1034407046f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T19:07:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"53938734-7e93-4460-aa3d-5d373c93bd74","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T19:07:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"53938734-7e93-4460-aa3d-5d373c93bd74","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T19:07:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"53938734-7e93-4460-aa3d-5d373c93bd74","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-7b46a3/auth-test-model-7b46a3\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T19:07:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"53938734-7e93-4460-aa3d-5d373c93bd74","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T19:07:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"53938734-7e93-4460-aa3d-5d373c93bd74","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-10T19:07:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"53938734-7e93-4460-aa3d-5d373c93bd74","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-10T19:07:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"53938734-7e93-4460-aa3d-5d373c93bd74","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T19:07:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"53938734-7e93-4460-aa3d-5d373c93bd74","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T19:07:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"26f61c1b-7864-46b6-afaf-3036b4831a67","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.16:59974","PortSpecifier":{"PortValue":59974}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"26f61c1b-7864-46b6-afaf-3036b4831a67","method":"GET","path":"/maas-api/v1/api-keys/f594790f-3e41-4d53-a3b8-7d446e5a08e5","host":"e2e-shared-b-7b46a3.apps.d363791c-37c4-4115-b4f0-e1034407046f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T19:07:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"26f61c1b-7864-46b6-afaf-3036b4831a67","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.16:59974","PortSpecifier":{"PortValue":59974}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783710459,"nanos":626449243},"http":{"id":"26f61c1b-7864-46b6-afaf-3036b4831a67","method":"GET","headers":{":authority":"e2e-shared-b-7b46a3.apps.d363791c-37c4-4115-b4f0-e1034407046f.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/f594790f-3e41-4d53-a3b8-7d446e5a08e5",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T19:07:39Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"26f61c1b-7864-46b6-afaf-3036b4831a67","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T19:07:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"26f61c1b-7864-46b6-afaf-3036b4831a67","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6dd43bae-5856-4bf7-aa31-595588c0c7b9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f4bfb603-1d1c-4dfe-aa58-2bd1826c9b75"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e1034407046f"]}} {"level":"debug","ts":"2026-07-10T19:07:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"26f61c1b-7864-46b6-afaf-3036b4831a67","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e1034407046f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f4bfb603-1d1c-4dfe-aa58-2bd1826c9b75"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6dd43bae-5856-4bf7-aa31-595588c0c7b9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"35322e841f878a999b9fb319d53b4ede55fab1a3f4e612b55f96e99b3dae2210"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-7b46a3.apps.d363791c-37c4-4115-b4f0-e1034407046f.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/f594790f-3e41-4d53-a3b8-7d446e5a08e5",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T19:07:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"26f61c1b-7864-46b6-afaf-3036b4831a67","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T19:07:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"26f61c1b-7864-46b6-afaf-3036b4831a67","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T19:07:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"26f61c1b-7864-46b6-afaf-3036b4831a67","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-7b46a3/auth-test-model-7b46a3\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T19:07:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"26f61c1b-7864-46b6-afaf-3036b4831a67","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T19:07:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"26f61c1b-7864-46b6-afaf-3036b4831a67","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T19:07:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"26f61c1b-7864-46b6-afaf-3036b4831a67","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T19:07:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"26f61c1b-7864-46b6-afaf-3036b4831a67","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T19:07:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"26f61c1b-7864-46b6-afaf-3036b4831a67","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T19:07:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c39c2ab0-0f9f-4e3a-a11e-278e4941ab6d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.16:46916","PortSpecifier":{"PortValue":46916}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c39c2ab0-0f9f-4e3a-a11e-278e4941ab6d","method":"GET","path":"/maas-api/v1/api-keys/f594790f-3e41-4d53-a3b8-7d446e5a08e5","host":"e2e-shared-a-33ca20.apps.d363791c-37c4-4115-b4f0-e1034407046f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T19:07:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c39c2ab0-0f9f-4e3a-a11e-278e4941ab6d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.16:46916","PortSpecifier":{"PortValue":46916}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783710459,"nanos":660888050},"http":{"id":"c39c2ab0-0f9f-4e3a-a11e-278e4941ab6d","method":"GET","headers":{":authority":"e2e-shared-a-33ca20.apps.d363791c-37c4-4115-b4f0-e1034407046f.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/f594790f-3e41-4d53-a3b8-7d446e5a08e5",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T19:07:39Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c39c2ab0-0f9f-4e3a-a11e-278e4941ab6d","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T19:07:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c39c2ab0-0f9f-4e3a-a11e-278e4941ab6d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6dd43bae-5856-4bf7-aa31-595588c0c7b9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f4bfb603-1d1c-4dfe-aa58-2bd1826c9b75"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e1034407046f"]}} {"level":"debug","ts":"2026-07-10T19:07:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c39c2ab0-0f9f-4e3a-a11e-278e4941ab6d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e1034407046f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f4bfb603-1d1c-4dfe-aa58-2bd1826c9b75"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6dd43bae-5856-4bf7-aa31-595588c0c7b9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"dfe8ef1a9af1a1204ec43304f443a5ef3a6e3fe57a18deb1e094e93f15b7548d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-33ca20.apps.d363791c-37c4-4115-b4f0-e1034407046f.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/f594790f-3e41-4d53-a3b8-7d446e5a08e5",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T19:07:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c39c2ab0-0f9f-4e3a-a11e-278e4941ab6d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T19:07:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c39c2ab0-0f9f-4e3a-a11e-278e4941ab6d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T19:07:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c39c2ab0-0f9f-4e3a-a11e-278e4941ab6d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-33ca20/auth-test-model-33ca20\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T19:07:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c39c2ab0-0f9f-4e3a-a11e-278e4941ab6d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T19:07:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c39c2ab0-0f9f-4e3a-a11e-278e4941ab6d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T19:07:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c39c2ab0-0f9f-4e3a-a11e-278e4941ab6d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T19:07:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c39c2ab0-0f9f-4e3a-a11e-278e4941ab6d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T19:07:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c39c2ab0-0f9f-4e3a-a11e-278e4941ab6d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T19:07:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ce33f237-9c00-4d3e-8aa0-65cea131c8ed","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.16:38284","PortSpecifier":{"PortValue":38284}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ce33f237-9c00-4d3e-8aa0-65cea131c8ed","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-33ca20.apps.d363791c-37c4-4115-b4f0-e1034407046f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T19:07:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ce33f237-9c00-4d3e-8aa0-65cea131c8ed","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.16:38284","PortSpecifier":{"PortValue":38284}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783710476,"nanos":604737210},"http":{"id":"ce33f237-9c00-4d3e-8aa0-65cea131c8ed","method":"POST","headers":{":authority":"e2e-shared-a-33ca20.apps.d363791c-37c4-4115-b4f0-e1034407046f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T19:07:56Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ce33f237-9c00-4d3e-8aa0-65cea131c8ed","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T19:07:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ce33f237-9c00-4d3e-8aa0-65cea131c8ed","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6dd43bae-5856-4bf7-aa31-595588c0c7b9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f4bfb603-1d1c-4dfe-aa58-2bd1826c9b75"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e1034407046f"]}} {"level":"debug","ts":"2026-07-10T19:07:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ce33f237-9c00-4d3e-8aa0-65cea131c8ed","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e1034407046f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f4bfb603-1d1c-4dfe-aa58-2bd1826c9b75"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6dd43bae-5856-4bf7-aa31-595588c0c7b9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"dfe8ef1a9af1a1204ec43304f443a5ef3a6e3fe57a18deb1e094e93f15b7548d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-33ca20.apps.d363791c-37c4-4115-b4f0-e1034407046f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T19:07:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ce33f237-9c00-4d3e-8aa0-65cea131c8ed","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T19:07:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ce33f237-9c00-4d3e-8aa0-65cea131c8ed","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T19:07:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ce33f237-9c00-4d3e-8aa0-65cea131c8ed","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-33ca20/auth-test-model-33ca20\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T19:07:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ce33f237-9c00-4d3e-8aa0-65cea131c8ed","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T19:07:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ce33f237-9c00-4d3e-8aa0-65cea131c8ed","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T19:07:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ce33f237-9c00-4d3e-8aa0-65cea131c8ed","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T19:07:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ce33f237-9c00-4d3e-8aa0-65cea131c8ed","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T19:07:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ce33f237-9c00-4d3e-8aa0-65cea131c8ed","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T19:07:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8e449ef5-9bc6-45dd-85c9-11a758e6f84b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.16:47726","PortSpecifier":{"PortValue":47726}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8e449ef5-9bc6-45dd-85c9-11a758e6f84b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-7b46a3.apps.d363791c-37c4-4115-b4f0-e1034407046f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T19:07:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8e449ef5-9bc6-45dd-85c9-11a758e6f84b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.16:47726","PortSpecifier":{"PortValue":47726}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783710476,"nanos":637213054},"http":{"id":"8e449ef5-9bc6-45dd-85c9-11a758e6f84b","method":"POST","headers":{":authority":"e2e-shared-b-7b46a3.apps.d363791c-37c4-4115-b4f0-e1034407046f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T19:07:56Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8e449ef5-9bc6-45dd-85c9-11a758e6f84b","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T19:07:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8e449ef5-9bc6-45dd-85c9-11a758e6f84b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6dd43bae-5856-4bf7-aa31-595588c0c7b9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f4bfb603-1d1c-4dfe-aa58-2bd1826c9b75"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e1034407046f"]}} {"level":"debug","ts":"2026-07-10T19:07:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8e449ef5-9bc6-45dd-85c9-11a758e6f84b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e1034407046f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f4bfb603-1d1c-4dfe-aa58-2bd1826c9b75"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6dd43bae-5856-4bf7-aa31-595588c0c7b9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"35322e841f878a999b9fb319d53b4ede55fab1a3f4e612b55f96e99b3dae2210"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-7b46a3.apps.d363791c-37c4-4115-b4f0-e1034407046f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T19:07:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8e449ef5-9bc6-45dd-85c9-11a758e6f84b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T19:07:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8e449ef5-9bc6-45dd-85c9-11a758e6f84b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T19:07:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8e449ef5-9bc6-45dd-85c9-11a758e6f84b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-7b46a3/auth-test-model-7b46a3\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T19:07:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8e449ef5-9bc6-45dd-85c9-11a758e6f84b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T19:07:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8e449ef5-9bc6-45dd-85c9-11a758e6f84b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-10T19:07:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8e449ef5-9bc6-45dd-85c9-11a758e6f84b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-10T19:07:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8e449ef5-9bc6-45dd-85c9-11a758e6f84b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T19:07:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8e449ef5-9bc6-45dd-85c9-11a758e6f84b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T19:07:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f0ccb6f2-f82f-4633-93bd-7c85f6071b8f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.16:38286","PortSpecifier":{"PortValue":38286}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f0ccb6f2-f82f-4633-93bd-7c85f6071b8f","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-33ca20.apps.d363791c-37c4-4115-b4f0-e1034407046f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T19:07:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f0ccb6f2-f82f-4633-93bd-7c85f6071b8f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.16:38286","PortSpecifier":{"PortValue":38286}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783710476,"nanos":673765407},"http":{"id":"f0ccb6f2-f82f-4633-93bd-7c85f6071b8f","method":"POST","headers":{":authority":"e2e-shared-a-33ca20.apps.d363791c-37c4-4115-b4f0-e1034407046f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T19:07:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f0ccb6f2-f82f-4633-93bd-7c85f6071b8f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-9AmB6lBhm6cWWLu4_7WO99sccAm1ZiEPQJjgjCoRm9uBdkiXYa4cEMb6rqTc"} {"level":"debug","ts":"2026-07-10T19:07:56Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f0ccb6f2-f82f-4633-93bd-7c85f6071b8f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-33ca20.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-9AmB6lBhm6cWWLu4_7WO99sccAm1ZiEPQJjgjCoRm9uBdkiXYa4cEMb6rqTc\"}"} {"level":"debug","ts":"2026-07-10T19:07:56Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f0ccb6f2-f82f-4633-93bd-7c85f6071b8f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-33ca20.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1473cc31-62c4-4dd6-8243-03f6b18f033d","keyName":"e2e-auth-iso-a-ee3e3c","subscription":"e2e-auth-iso-f7ab64","tenant":"e2e-shared-a-33ca20","userId":"1473cc31-62c4-4dd6-8243-03f6b18f033d","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-10T19:07:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f0ccb6f2-f82f-4633-93bd-7c85f6071b8f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T19:07:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f0ccb6f2-f82f-4633-93bd-7c85f6071b8f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T19:07:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f0ccb6f2-f82f-4633-93bd-7c85f6071b8f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T19:07:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f0ccb6f2-f82f-4633-93bd-7c85f6071b8f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-33ca20/auth-test-model-33ca20\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T19:07:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f0ccb6f2-f82f-4633-93bd-7c85f6071b8f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-10T19:07:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f0ccb6f2-f82f-4633-93bd-7c85f6071b8f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T19:07:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f0ccb6f2-f82f-4633-93bd-7c85f6071b8f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-f7ab64"} {"level":"debug","ts":"2026-07-10T19:07:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f0ccb6f2-f82f-4633-93bd-7c85f6071b8f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T19:07:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f0ccb6f2-f82f-4633-93bd-7c85f6071b8f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T19:07:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f0ccb6f2-f82f-4633-93bd-7c85f6071b8f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T19:08:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a42f9a5550c9c61991aeeb138136630ea86c1a803c8331b9411606cd03649d77"} {"level":"info","ts":"2026-07-10T19:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ea1f273c4c5f5478a3ddc5174a962c67f938ecd32e7fe226023a16e75e719b68"} {"level":"info","ts":"2026-07-10T19:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6f81cd037a8d858cfa8c53204a6b7f368e0f20c8b1c7abcf051fa4965010ba0e"} {"level":"info","ts":"2026-07-10T19:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/88abb69b0bb9fb4b761b5d646340d5c7067c0deccbb2d604c9d424c28721efba"} {"level":"info","ts":"2026-07-10T19:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1e526c6fe7a402cb7996692ebf851a928668b0e70b3bc1202429a888d9b2823f"} {"level":"info","ts":"2026-07-10T19:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c1c8408b7eac7706c8c390015049e5234d1d94ba478cd95938492f1585d84fdc"} {"level":"info","ts":"2026-07-10T19:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/04444ef7c8618701d76a75d02317c0fd017bd41789da1cf4d66502032be6bff6"} {"level":"info","ts":"2026-07-10T19:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/55162b8e5d496e56490eea59e3fcc5412abfe784d3b19f2e50e21d379fd73c63"} {"level":"info","ts":"2026-07-10T19:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b98d913fdb20d97566a5ccab87404150d4921648c0ec194b2bc706f90c80fee5"} {"level":"info","ts":"2026-07-10T19:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5652a4906cc9838b65f114e0f72ca1e1c9c7bbe9d4f6f8a59453645028e6bdcb"} {"level":"info","ts":"2026-07-10T19:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3b7544fe508318541e21b7615ae8204f9abb34a26b467d1b88165f1e1343446b"} {"level":"info","ts":"2026-07-10T19:08:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6d2c43379bf83578b7069e3fcdd0de3bfdb8af29a020f2d49d3fbc8371b7fc3f"} {"level":"info","ts":"2026-07-10T19:08:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bcde3f55c52bf2dc7200e362a5cea63a3c1e58931a72b12cf51f660ef0770180"} {"level":"info","ts":"2026-07-10T19:08:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c70ba591e792c653e50bf39f8691707f87d10ec9255c6e91f541cf399d388b86"} {"level":"info","ts":"2026-07-10T19:08:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3ea08d595c228ceba2113e379f55565a4cd4a8fd989416bcd8f13843f5e2d6d5"} {"level":"info","ts":"2026-07-10T19:08:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0445152dacdc1e877b1755ad1f95f10ef069d3417ca6792230112555893e95a7"} {"level":"debug","ts":"2026-07-10T19:08:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d111f1b904ec71500af0937736dfc86a65df67c92bdff77a7ca400f954d868c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:08:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:08:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:08:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d111f1b904ec71500af0937736dfc86a65df67c92bdff77a7ca400f954d868c4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:08:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d111f1b904ec71500af0937736dfc86a65df67c92bdff77a7ca400f954d868c4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:08:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d111f1b904ec71500af0937736dfc86a65df67c92bdff77a7ca400f954d868c4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:08:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d111f1b904ec71500af0937736dfc86a65df67c92bdff77a7ca400f954d868c4"} {"level":"debug","ts":"2026-07-10T19:08:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d111f1b904ec71500af0937736dfc86a65df67c92bdff77a7ca400f954d868c4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:08:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d111f1b904ec71500af0937736dfc86a65df67c92bdff77a7ca400f954d868c4"} {"level":"debug","ts":"2026-07-10T19:08:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d111f1b904ec71500af0937736dfc86a65df67c92bdff77a7ca400f954d868c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:08:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:08:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d111f1b904ec71500af0937736dfc86a65df67c92bdff77a7ca400f954d868c4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:08:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d111f1b904ec71500af0937736dfc86a65df67c92bdff77a7ca400f954d868c4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:08:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d111f1b904ec71500af0937736dfc86a65df67c92bdff77a7ca400f954d868c4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:08:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d111f1b904ec71500af0937736dfc86a65df67c92bdff77a7ca400f954d868c4"} {"level":"debug","ts":"2026-07-10T19:08:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"297abd0bbed03231b5142955f55b8b2e7cd95361126e006d32dfd770ad54e04b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:08:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:08:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:08:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"297abd0bbed03231b5142955f55b8b2e7cd95361126e006d32dfd770ad54e04b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:08:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"297abd0bbed03231b5142955f55b8b2e7cd95361126e006d32dfd770ad54e04b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:08:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"297abd0bbed03231b5142955f55b8b2e7cd95361126e006d32dfd770ad54e04b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:08:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/297abd0bbed03231b5142955f55b8b2e7cd95361126e006d32dfd770ad54e04b"} {"level":"debug","ts":"2026-07-10T19:08:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"297abd0bbed03231b5142955f55b8b2e7cd95361126e006d32dfd770ad54e04b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:08:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/297abd0bbed03231b5142955f55b8b2e7cd95361126e006d32dfd770ad54e04b"} {"level":"debug","ts":"2026-07-10T19:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"297abd0bbed03231b5142955f55b8b2e7cd95361126e006d32dfd770ad54e04b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:08:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:08:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["297abd0bbed03231b5142955f55b8b2e7cd95361126e006d32dfd770ad54e04b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"297abd0bbed03231b5142955f55b8b2e7cd95361126e006d32dfd770ad54e04b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"297abd0bbed03231b5142955f55b8b2e7cd95361126e006d32dfd770ad54e04b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:08:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:08:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"297abd0bbed03231b5142955f55b8b2e7cd95361126e006d32dfd770ad54e04b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"297abd0bbed03231b5142955f55b8b2e7cd95361126e006d32dfd770ad54e04b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"297abd0bbed03231b5142955f55b8b2e7cd95361126e006d32dfd770ad54e04b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/297abd0bbed03231b5142955f55b8b2e7cd95361126e006d32dfd770ad54e04b"} {"level":"debug","ts":"2026-07-10T19:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"297abd0bbed03231b5142955f55b8b2e7cd95361126e006d32dfd770ad54e04b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/297abd0bbed03231b5142955f55b8b2e7cd95361126e006d32dfd770ad54e04b"} {"level":"debug","ts":"2026-07-10T19:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"297abd0bbed03231b5142955f55b8b2e7cd95361126e006d32dfd770ad54e04b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:08:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:08:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["297abd0bbed03231b5142955f55b8b2e7cd95361126e006d32dfd770ad54e04b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"297abd0bbed03231b5142955f55b8b2e7cd95361126e006d32dfd770ad54e04b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"297abd0bbed03231b5142955f55b8b2e7cd95361126e006d32dfd770ad54e04b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:08:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:08:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"297abd0bbed03231b5142955f55b8b2e7cd95361126e006d32dfd770ad54e04b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c845e0097e502f097409759210db0d3c4946cbe41566cc6e9180dda83cc25ea0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:08:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:08:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/297abd0bbed03231b5142955f55b8b2e7cd95361126e006d32dfd770ad54e04b"} {"level":"info","ts":"2026-07-10T19:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c845e0097e502f097409759210db0d3c4946cbe41566cc6e9180dda83cc25ea0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"297abd0bbed03231b5142955f55b8b2e7cd95361126e006d32dfd770ad54e04b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:08:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:08:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["297abd0bbed03231b5142955f55b8b2e7cd95361126e006d32dfd770ad54e04b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"297abd0bbed03231b5142955f55b8b2e7cd95361126e006d32dfd770ad54e04b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c845e0097e502f097409759210db0d3c4946cbe41566cc6e9180dda83cc25ea0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:08:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:08:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c845e0097e502f097409759210db0d3c4946cbe41566cc6e9180dda83cc25ea0"} {"level":"info","ts":"2026-07-10T19:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c845e0097e502f097409759210db0d3c4946cbe41566cc6e9180dda83cc25ea0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"297abd0bbed03231b5142955f55b8b2e7cd95361126e006d32dfd770ad54e04b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:08:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:08:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/297abd0bbed03231b5142955f55b8b2e7cd95361126e006d32dfd770ad54e04b"} {"level":"info","ts":"2026-07-10T19:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"297abd0bbed03231b5142955f55b8b2e7cd95361126e006d32dfd770ad54e04b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c845e0097e502f097409759210db0d3c4946cbe41566cc6e9180dda83cc25ea0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"297abd0bbed03231b5142955f55b8b2e7cd95361126e006d32dfd770ad54e04b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:08:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:08:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["297abd0bbed03231b5142955f55b8b2e7cd95361126e006d32dfd770ad54e04b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"297abd0bbed03231b5142955f55b8b2e7cd95361126e006d32dfd770ad54e04b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"297abd0bbed03231b5142955f55b8b2e7cd95361126e006d32dfd770ad54e04b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:08:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:08:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["297abd0bbed03231b5142955f55b8b2e7cd95361126e006d32dfd770ad54e04b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c845e0097e502f097409759210db0d3c4946cbe41566cc6e9180dda83cc25ea0"} {"level":"error","ts":"2026-07-10T19:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"297abd0bbed03231b5142955f55b8b2e7cd95361126e006d32dfd770ad54e04b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"297abd0bbed03231b5142955f55b8b2e7cd95361126e006d32dfd770ad54e04b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-10T19:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c845e0097e502f097409759210db0d3c4946cbe41566cc6e9180dda83cc25ea0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:08:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:08:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c845e0097e502f097409759210db0d3c4946cbe41566cc6e9180dda83cc25ea0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c845e0097e502f097409759210db0d3c4946cbe41566cc6e9180dda83cc25ea0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"297abd0bbed03231b5142955f55b8b2e7cd95361126e006d32dfd770ad54e04b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:08:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:08:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/297abd0bbed03231b5142955f55b8b2e7cd95361126e006d32dfd770ad54e04b"} {"level":"info","ts":"2026-07-10T19:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"297abd0bbed03231b5142955f55b8b2e7cd95361126e006d32dfd770ad54e04b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"300e6ea3b19e6a2db029a3371b8b73cc52054eb1820d9981ee0f4b42d575c3de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:08:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:08:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/300e6ea3b19e6a2db029a3371b8b73cc52054eb1820d9981ee0f4b42d575c3de"} {"level":"info","ts":"2026-07-10T19:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"300e6ea3b19e6a2db029a3371b8b73cc52054eb1820d9981ee0f4b42d575c3de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c845e0097e502f097409759210db0d3c4946cbe41566cc6e9180dda83cc25ea0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:08:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:08:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c845e0097e502f097409759210db0d3c4946cbe41566cc6e9180dda83cc25ea0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"297abd0bbed03231b5142955f55b8b2e7cd95361126e006d32dfd770ad54e04b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:08:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:08:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["297abd0bbed03231b5142955f55b8b2e7cd95361126e006d32dfd770ad54e04b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c845e0097e502f097409759210db0d3c4946cbe41566cc6e9180dda83cc25ea0"} {"level":"info","ts":"2026-07-10T19:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"297abd0bbed03231b5142955f55b8b2e7cd95361126e006d32dfd770ad54e04b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"300e6ea3b19e6a2db029a3371b8b73cc52054eb1820d9981ee0f4b42d575c3de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:08:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:08:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["300e6ea3b19e6a2db029a3371b8b73cc52054eb1820d9981ee0f4b42d575c3de"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"300e6ea3b19e6a2db029a3371b8b73cc52054eb1820d9981ee0f4b42d575c3de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c845e0097e502f097409759210db0d3c4946cbe41566cc6e9180dda83cc25ea0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:08:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:08:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c845e0097e502f097409759210db0d3c4946cbe41566cc6e9180dda83cc25ea0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/297abd0bbed03231b5142955f55b8b2e7cd95361126e006d32dfd770ad54e04b"} {"level":"info","ts":"2026-07-10T19:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c845e0097e502f097409759210db0d3c4946cbe41566cc6e9180dda83cc25ea0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"297abd0bbed03231b5142955f55b8b2e7cd95361126e006d32dfd770ad54e04b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"300e6ea3b19e6a2db029a3371b8b73cc52054eb1820d9981ee0f4b42d575c3de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:08:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:08:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/300e6ea3b19e6a2db029a3371b8b73cc52054eb1820d9981ee0f4b42d575c3de"} {"level":"info","ts":"2026-07-10T19:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"300e6ea3b19e6a2db029a3371b8b73cc52054eb1820d9981ee0f4b42d575c3de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c845e0097e502f097409759210db0d3c4946cbe41566cc6e9180dda83cc25ea0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:08:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:08:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c845e0097e502f097409759210db0d3c4946cbe41566cc6e9180dda83cc25ea0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"300e6ea3b19e6a2db029a3371b8b73cc52054eb1820d9981ee0f4b42d575c3de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:08:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:08:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["300e6ea3b19e6a2db029a3371b8b73cc52054eb1820d9981ee0f4b42d575c3de"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c845e0097e502f097409759210db0d3c4946cbe41566cc6e9180dda83cc25ea0"} {"level":"info","ts":"2026-07-10T19:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"300e6ea3b19e6a2db029a3371b8b73cc52054eb1820d9981ee0f4b42d575c3de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c845e0097e502f097409759210db0d3c4946cbe41566cc6e9180dda83cc25ea0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:08:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:08:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c845e0097e502f097409759210db0d3c4946cbe41566cc6e9180dda83cc25ea0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c845e0097e502f097409759210db0d3c4946cbe41566cc6e9180dda83cc25ea0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"300e6ea3b19e6a2db029a3371b8b73cc52054eb1820d9981ee0f4b42d575c3de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c845e0097e502f097409759210db0d3c4946cbe41566cc6e9180dda83cc25ea0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/297abd0bbed03231b5142955f55b8b2e7cd95361126e006d32dfd770ad54e04b"} {"level":"info","ts":"2026-07-10T19:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/300e6ea3b19e6a2db029a3371b8b73cc52054eb1820d9981ee0f4b42d575c3de"} {"level":"info","ts":"2026-07-10T19:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c845e0097e502f097409759210db0d3c4946cbe41566cc6e9180dda83cc25ea0"} {"level":"debug","ts":"2026-07-10T19:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eaf56c17828d587f7339a43f9896f6233f42805c5d50f03b38ee155aaf7483fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:08:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:08:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eaf56c17828d587f7339a43f9896f6233f42805c5d50f03b38ee155aaf7483fe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eaf56c17828d587f7339a43f9896f6233f42805c5d50f03b38ee155aaf7483fe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eaf56c17828d587f7339a43f9896f6233f42805c5d50f03b38ee155aaf7483fe","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eaf56c17828d587f7339a43f9896f6233f42805c5d50f03b38ee155aaf7483fe"} {"level":"debug","ts":"2026-07-10T19:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eaf56c17828d587f7339a43f9896f6233f42805c5d50f03b38ee155aaf7483fe","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eaf56c17828d587f7339a43f9896f6233f42805c5d50f03b38ee155aaf7483fe"} {"level":"debug","ts":"2026-07-10T19:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eaf56c17828d587f7339a43f9896f6233f42805c5d50f03b38ee155aaf7483fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:08:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:08:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eaf56c17828d587f7339a43f9896f6233f42805c5d50f03b38ee155aaf7483fe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eaf56c17828d587f7339a43f9896f6233f42805c5d50f03b38ee155aaf7483fe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eaf56c17828d587f7339a43f9896f6233f42805c5d50f03b38ee155aaf7483fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:08:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:08:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eaf56c17828d587f7339a43f9896f6233f42805c5d50f03b38ee155aaf7483fe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c957ee355a62da6ea46a4d3beb6abe4e08f8ff25da7e7c2e9d4eaf159f12e9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:08:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:08:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eaf56c17828d587f7339a43f9896f6233f42805c5d50f03b38ee155aaf7483fe"} {"level":"info","ts":"2026-07-10T19:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c957ee355a62da6ea46a4d3beb6abe4e08f8ff25da7e7c2e9d4eaf159f12e9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eaf56c17828d587f7339a43f9896f6233f42805c5d50f03b38ee155aaf7483fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:08:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:08:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eaf56c17828d587f7339a43f9896f6233f42805c5d50f03b38ee155aaf7483fe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c957ee355a62da6ea46a4d3beb6abe4e08f8ff25da7e7c2e9d4eaf159f12e9f"} {"level":"info","ts":"2026-07-10T19:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eaf56c17828d587f7339a43f9896f6233f42805c5d50f03b38ee155aaf7483fe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c957ee355a62da6ea46a4d3beb6abe4e08f8ff25da7e7c2e9d4eaf159f12e9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:08:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:08:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9c957ee355a62da6ea46a4d3beb6abe4e08f8ff25da7e7c2e9d4eaf159f12e9f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eaf56c17828d587f7339a43f9896f6233f42805c5d50f03b38ee155aaf7483fe"} {"level":"info","ts":"2026-07-10T19:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c957ee355a62da6ea46a4d3beb6abe4e08f8ff25da7e7c2e9d4eaf159f12e9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eaf56c17828d587f7339a43f9896f6233f42805c5d50f03b38ee155aaf7483fe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c957ee355a62da6ea46a4d3beb6abe4e08f8ff25da7e7c2e9d4eaf159f12e9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:08:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:08:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c957ee355a62da6ea46a4d3beb6abe4e08f8ff25da7e7c2e9d4eaf159f12e9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c957ee355a62da6ea46a4d3beb6abe4e08f8ff25da7e7c2e9d4eaf159f12e9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c957ee355a62da6ea46a4d3beb6abe4e08f8ff25da7e7c2e9d4eaf159f12e9f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c957ee355a62da6ea46a4d3beb6abe4e08f8ff25da7e7c2e9d4eaf159f12e9f"} {"level":"debug","ts":"2026-07-10T19:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c957ee355a62da6ea46a4d3beb6abe4e08f8ff25da7e7c2e9d4eaf159f12e9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:08:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:08:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9c957ee355a62da6ea46a4d3beb6abe4e08f8ff25da7e7c2e9d4eaf159f12e9f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eaf56c17828d587f7339a43f9896f6233f42805c5d50f03b38ee155aaf7483fe"} {"level":"info","ts":"2026-07-10T19:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c957ee355a62da6ea46a4d3beb6abe4e08f8ff25da7e7c2e9d4eaf159f12e9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c957ee355a62da6ea46a4d3beb6abe4e08f8ff25da7e7c2e9d4eaf159f12e9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:08:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:08:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c957ee355a62da6ea46a4d3beb6abe4e08f8ff25da7e7c2e9d4eaf159f12e9f"} {"level":"info","ts":"2026-07-10T19:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c957ee355a62da6ea46a4d3beb6abe4e08f8ff25da7e7c2e9d4eaf159f12e9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c957ee355a62da6ea46a4d3beb6abe4e08f8ff25da7e7c2e9d4eaf159f12e9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c957ee355a62da6ea46a4d3beb6abe4e08f8ff25da7e7c2e9d4eaf159f12e9f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c957ee355a62da6ea46a4d3beb6abe4e08f8ff25da7e7c2e9d4eaf159f12e9f"} {"level":"debug","ts":"2026-07-10T19:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c957ee355a62da6ea46a4d3beb6abe4e08f8ff25da7e7c2e9d4eaf159f12e9f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c957ee355a62da6ea46a4d3beb6abe4e08f8ff25da7e7c2e9d4eaf159f12e9f"} {"level":"debug","ts":"2026-07-10T19:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c957ee355a62da6ea46a4d3beb6abe4e08f8ff25da7e7c2e9d4eaf159f12e9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:08:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:08:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9c957ee355a62da6ea46a4d3beb6abe4e08f8ff25da7e7c2e9d4eaf159f12e9f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c957ee355a62da6ea46a4d3beb6abe4e08f8ff25da7e7c2e9d4eaf159f12e9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b74401fb0fda16086aa2596af3af21c97b9b74a11b13f3f1a95a859eacbec9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:08:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:08:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b74401fb0fda16086aa2596af3af21c97b9b74a11b13f3f1a95a859eacbec9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c957ee355a62da6ea46a4d3beb6abe4e08f8ff25da7e7c2e9d4eaf159f12e9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b74401fb0fda16086aa2596af3af21c97b9b74a11b13f3f1a95a859eacbec9f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b74401fb0fda16086aa2596af3af21c97b9b74a11b13f3f1a95a859eacbec9f"} {"level":"debug","ts":"2026-07-10T19:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b74401fb0fda16086aa2596af3af21c97b9b74a11b13f3f1a95a859eacbec9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:08:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:08:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3b74401fb0fda16086aa2596af3af21c97b9b74a11b13f3f1a95a859eacbec9f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b74401fb0fda16086aa2596af3af21c97b9b74a11b13f3f1a95a859eacbec9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b74401fb0fda16086aa2596af3af21c97b9b74a11b13f3f1a95a859eacbec9f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c957ee355a62da6ea46a4d3beb6abe4e08f8ff25da7e7c2e9d4eaf159f12e9f"} {"level":"info","ts":"2026-07-10T19:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b74401fb0fda16086aa2596af3af21c97b9b74a11b13f3f1a95a859eacbec9f"} {"level":"debug","ts":"2026-07-10T19:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ac5b9e820f4dcaeeecf2cbeaa0942f9d20655987860d4d8e069540730763318","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:08:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:08:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ac5b9e820f4dcaeeecf2cbeaa0942f9d20655987860d4d8e069540730763318","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ac5b9e820f4dcaeeecf2cbeaa0942f9d20655987860d4d8e069540730763318","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ac5b9e820f4dcaeeecf2cbeaa0942f9d20655987860d4d8e069540730763318","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ac5b9e820f4dcaeeecf2cbeaa0942f9d20655987860d4d8e069540730763318"} {"level":"debug","ts":"2026-07-10T19:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ac5b9e820f4dcaeeecf2cbeaa0942f9d20655987860d4d8e069540730763318","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ac5b9e820f4dcaeeecf2cbeaa0942f9d20655987860d4d8e069540730763318"} {"level":"debug","ts":"2026-07-10T19:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ac5b9e820f4dcaeeecf2cbeaa0942f9d20655987860d4d8e069540730763318","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:08:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:08:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ac5b9e820f4dcaeeecf2cbeaa0942f9d20655987860d4d8e069540730763318"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ac5b9e820f4dcaeeecf2cbeaa0942f9d20655987860d4d8e069540730763318","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ac5b9e820f4dcaeeecf2cbeaa0942f9d20655987860d4d8e069540730763318","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:08:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:08:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ac5b9e820f4dcaeeecf2cbeaa0942f9d20655987860d4d8e069540730763318","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ac5b9e820f4dcaeeecf2cbeaa0942f9d20655987860d4d8e069540730763318","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ac5b9e820f4dcaeeecf2cbeaa0942f9d20655987860d4d8e069540730763318","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ac5b9e820f4dcaeeecf2cbeaa0942f9d20655987860d4d8e069540730763318"} {"level":"debug","ts":"2026-07-10T19:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ac5b9e820f4dcaeeecf2cbeaa0942f9d20655987860d4d8e069540730763318","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ac5b9e820f4dcaeeecf2cbeaa0942f9d20655987860d4d8e069540730763318"} {"level":"debug","ts":"2026-07-10T19:08:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ac5b9e820f4dcaeeecf2cbeaa0942f9d20655987860d4d8e069540730763318","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:08:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:08:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ac5b9e820f4dcaeeecf2cbeaa0942f9d20655987860d4d8e069540730763318"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:08:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ac5b9e820f4dcaeeecf2cbeaa0942f9d20655987860d4d8e069540730763318","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:08:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ac5b9e820f4dcaeeecf2cbeaa0942f9d20655987860d4d8e069540730763318","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:08:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:08:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:08:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ac5b9e820f4dcaeeecf2cbeaa0942f9d20655987860d4d8e069540730763318","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:08:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ac5b9e820f4dcaeeecf2cbeaa0942f9d20655987860d4d8e069540730763318","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:08:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ac5b9e820f4dcaeeecf2cbeaa0942f9d20655987860d4d8e069540730763318","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:08:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ac5b9e820f4dcaeeecf2cbeaa0942f9d20655987860d4d8e069540730763318"} {"level":"debug","ts":"2026-07-10T19:08:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ac5b9e820f4dcaeeecf2cbeaa0942f9d20655987860d4d8e069540730763318","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:08:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ac5b9e820f4dcaeeecf2cbeaa0942f9d20655987860d4d8e069540730763318"} {"level":"debug","ts":"2026-07-10T19:08:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ac5b9e820f4dcaeeecf2cbeaa0942f9d20655987860d4d8e069540730763318","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:08:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:08:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ac5b9e820f4dcaeeecf2cbeaa0942f9d20655987860d4d8e069540730763318"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:08:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ac5b9e820f4dcaeeecf2cbeaa0942f9d20655987860d4d8e069540730763318","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:08:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ac5b9e820f4dcaeeecf2cbeaa0942f9d20655987860d4d8e069540730763318","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:08:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ac5b9e820f4dcaeeecf2cbeaa0942f9d20655987860d4d8e069540730763318"} {"level":"debug","ts":"2026-07-10T19:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"141aaf22f2de77ffdee50da40d794a3b0863bac5c7eb7603eae3ebcf00f84e96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:08:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:08:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"141aaf22f2de77ffdee50da40d794a3b0863bac5c7eb7603eae3ebcf00f84e96","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/141aaf22f2de77ffdee50da40d794a3b0863bac5c7eb7603eae3ebcf00f84e96"} {"level":"debug","ts":"2026-07-10T19:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"141aaf22f2de77ffdee50da40d794a3b0863bac5c7eb7603eae3ebcf00f84e96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:08:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:08:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"141aaf22f2de77ffdee50da40d794a3b0863bac5c7eb7603eae3ebcf00f84e96","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"141aaf22f2de77ffdee50da40d794a3b0863bac5c7eb7603eae3ebcf00f84e96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:08:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:08:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-10T19:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"141aaf22f2de77ffdee50da40d794a3b0863bac5c7eb7603eae3ebcf00f84e96","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"141aaf22f2de77ffdee50da40d794a3b0863bac5c7eb7603eae3ebcf00f84e96\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-10T19:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"141aaf22f2de77ffdee50da40d794a3b0863bac5c7eb7603eae3ebcf00f84e96","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/141aaf22f2de77ffdee50da40d794a3b0863bac5c7eb7603eae3ebcf00f84e96"} {"level":"debug","ts":"2026-07-10T19:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"141aaf22f2de77ffdee50da40d794a3b0863bac5c7eb7603eae3ebcf00f84e96","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/141aaf22f2de77ffdee50da40d794a3b0863bac5c7eb7603eae3ebcf00f84e96"} {"level":"debug","ts":"2026-07-10T19:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"141aaf22f2de77ffdee50da40d794a3b0863bac5c7eb7603eae3ebcf00f84e96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:09:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:09:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["141aaf22f2de77ffdee50da40d794a3b0863bac5c7eb7603eae3ebcf00f84e96"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"141aaf22f2de77ffdee50da40d794a3b0863bac5c7eb7603eae3ebcf00f84e96","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"141aaf22f2de77ffdee50da40d794a3b0863bac5c7eb7603eae3ebcf00f84e96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:09:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:09:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"141aaf22f2de77ffdee50da40d794a3b0863bac5c7eb7603eae3ebcf00f84e96","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"141aaf22f2de77ffdee50da40d794a3b0863bac5c7eb7603eae3ebcf00f84e96","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"141aaf22f2de77ffdee50da40d794a3b0863bac5c7eb7603eae3ebcf00f84e96","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/141aaf22f2de77ffdee50da40d794a3b0863bac5c7eb7603eae3ebcf00f84e96"} {"level":"debug","ts":"2026-07-10T19:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"141aaf22f2de77ffdee50da40d794a3b0863bac5c7eb7603eae3ebcf00f84e96","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/141aaf22f2de77ffdee50da40d794a3b0863bac5c7eb7603eae3ebcf00f84e96"} {"level":"debug","ts":"2026-07-10T19:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"141aaf22f2de77ffdee50da40d794a3b0863bac5c7eb7603eae3ebcf00f84e96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:09:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:09:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["141aaf22f2de77ffdee50da40d794a3b0863bac5c7eb7603eae3ebcf00f84e96"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"141aaf22f2de77ffdee50da40d794a3b0863bac5c7eb7603eae3ebcf00f84e96","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"141aaf22f2de77ffdee50da40d794a3b0863bac5c7eb7603eae3ebcf00f84e96","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/141aaf22f2de77ffdee50da40d794a3b0863bac5c7eb7603eae3ebcf00f84e96"} {"level":"debug","ts":"2026-07-10T19:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf6d234abf242f57e80acbb12a65cedec061a11dadcd51ad29a31224237f2e2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:09:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:09:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf6d234abf242f57e80acbb12a65cedec061a11dadcd51ad29a31224237f2e2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf6d234abf242f57e80acbb12a65cedec061a11dadcd51ad29a31224237f2e2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf6d234abf242f57e80acbb12a65cedec061a11dadcd51ad29a31224237f2e2e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf6d234abf242f57e80acbb12a65cedec061a11dadcd51ad29a31224237f2e2e"} {"level":"debug","ts":"2026-07-10T19:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf6d234abf242f57e80acbb12a65cedec061a11dadcd51ad29a31224237f2e2e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf6d234abf242f57e80acbb12a65cedec061a11dadcd51ad29a31224237f2e2e"} {"level":"debug","ts":"2026-07-10T19:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf6d234abf242f57e80acbb12a65cedec061a11dadcd51ad29a31224237f2e2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:09:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:09:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cf6d234abf242f57e80acbb12a65cedec061a11dadcd51ad29a31224237f2e2e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf6d234abf242f57e80acbb12a65cedec061a11dadcd51ad29a31224237f2e2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf6d234abf242f57e80acbb12a65cedec061a11dadcd51ad29a31224237f2e2e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf6d234abf242f57e80acbb12a65cedec061a11dadcd51ad29a31224237f2e2e"} {"level":"debug","ts":"2026-07-10T19:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87166a0df099b90714872bf29d9e7e9ef5bff83567cec591690c34df8f3e2471","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:09:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:09:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87166a0df099b90714872bf29d9e7e9ef5bff83567cec591690c34df8f3e2471","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87166a0df099b90714872bf29d9e7e9ef5bff83567cec591690c34df8f3e2471","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:09:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:09:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87166a0df099b90714872bf29d9e7e9ef5bff83567cec591690c34df8f3e2471"} {"level":"info","ts":"2026-07-10T19:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87166a0df099b90714872bf29d9e7e9ef5bff83567cec591690c34df8f3e2471","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87166a0df099b90714872bf29d9e7e9ef5bff83567cec591690c34df8f3e2471","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:09:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:09:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-10T19:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"87166a0df099b90714872bf29d9e7e9ef5bff83567cec591690c34df8f3e2471","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"87166a0df099b90714872bf29d9e7e9ef5bff83567cec591690c34df8f3e2471\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-10T19:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87166a0df099b90714872bf29d9e7e9ef5bff83567cec591690c34df8f3e2471","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87166a0df099b90714872bf29d9e7e9ef5bff83567cec591690c34df8f3e2471"} {"level":"debug","ts":"2026-07-10T19:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87166a0df099b90714872bf29d9e7e9ef5bff83567cec591690c34df8f3e2471","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87166a0df099b90714872bf29d9e7e9ef5bff83567cec591690c34df8f3e2471"} {"level":"debug","ts":"2026-07-10T19:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90714ee245d02f2cd2ac94e94cd4bcf7130f105565bedf65f8257e6d8ec92b92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:09:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:09:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90714ee245d02f2cd2ac94e94cd4bcf7130f105565bedf65f8257e6d8ec92b92","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90714ee245d02f2cd2ac94e94cd4bcf7130f105565bedf65f8257e6d8ec92b92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:09:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:09:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90714ee245d02f2cd2ac94e94cd4bcf7130f105565bedf65f8257e6d8ec92b92"} {"level":"info","ts":"2026-07-10T19:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90714ee245d02f2cd2ac94e94cd4bcf7130f105565bedf65f8257e6d8ec92b92","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87166a0df099b90714872bf29d9e7e9ef5bff83567cec591690c34df8f3e2471","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:09:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:09:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["87166a0df099b90714872bf29d9e7e9ef5bff83567cec591690c34df8f3e2471"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90714ee245d02f2cd2ac94e94cd4bcf7130f105565bedf65f8257e6d8ec92b92"} {"level":"info","ts":"2026-07-10T19:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87166a0df099b90714872bf29d9e7e9ef5bff83567cec591690c34df8f3e2471","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90714ee245d02f2cd2ac94e94cd4bcf7130f105565bedf65f8257e6d8ec92b92","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87166a0df099b90714872bf29d9e7e9ef5bff83567cec591690c34df8f3e2471","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90714ee245d02f2cd2ac94e94cd4bcf7130f105565bedf65f8257e6d8ec92b92","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90714ee245d02f2cd2ac94e94cd4bcf7130f105565bedf65f8257e6d8ec92b92"} {"level":"info","ts":"2026-07-10T19:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87166a0df099b90714872bf29d9e7e9ef5bff83567cec591690c34df8f3e2471"} {"level":"debug","ts":"2026-07-10T19:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b47d8ec689916de70312dcf8bf670bce239e3ca38b57e9408529100fdc9f667","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:09:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:09:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b47d8ec689916de70312dcf8bf670bce239e3ca38b57e9408529100fdc9f667","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90714ee245d02f2cd2ac94e94cd4bcf7130f105565bedf65f8257e6d8ec92b92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:09:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:09:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["90714ee245d02f2cd2ac94e94cd4bcf7130f105565bedf65f8257e6d8ec92b92"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b47d8ec689916de70312dcf8bf670bce239e3ca38b57e9408529100fdc9f667"} {"level":"info","ts":"2026-07-10T19:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90714ee245d02f2cd2ac94e94cd4bcf7130f105565bedf65f8257e6d8ec92b92","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b47d8ec689916de70312dcf8bf670bce239e3ca38b57e9408529100fdc9f667","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90714ee245d02f2cd2ac94e94cd4bcf7130f105565bedf65f8257e6d8ec92b92","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b47d8ec689916de70312dcf8bf670bce239e3ca38b57e9408529100fdc9f667","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b47d8ec689916de70312dcf8bf670bce239e3ca38b57e9408529100fdc9f667"} {"level":"debug","ts":"2026-07-10T19:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b47d8ec689916de70312dcf8bf670bce239e3ca38b57e9408529100fdc9f667","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:09:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:09:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8b47d8ec689916de70312dcf8bf670bce239e3ca38b57e9408529100fdc9f667"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90714ee245d02f2cd2ac94e94cd4bcf7130f105565bedf65f8257e6d8ec92b92"} {"level":"info","ts":"2026-07-10T19:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b47d8ec689916de70312dcf8bf670bce239e3ca38b57e9408529100fdc9f667","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b47d8ec689916de70312dcf8bf670bce239e3ca38b57e9408529100fdc9f667","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:09:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:09:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b47d8ec689916de70312dcf8bf670bce239e3ca38b57e9408529100fdc9f667","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b47d8ec689916de70312dcf8bf670bce239e3ca38b57e9408529100fdc9f667","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b47d8ec689916de70312dcf8bf670bce239e3ca38b57e9408529100fdc9f667","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32d8275eaf54bd3ccfc41cded099c761b01ee5643f792a0b596235f69ddad2a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:09:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:09:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b47d8ec689916de70312dcf8bf670bce239e3ca38b57e9408529100fdc9f667"} {"level":"info","ts":"2026-07-10T19:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32d8275eaf54bd3ccfc41cded099c761b01ee5643f792a0b596235f69ddad2a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32d8275eaf54bd3ccfc41cded099c761b01ee5643f792a0b596235f69ddad2a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:09:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:09:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32d8275eaf54bd3ccfc41cded099c761b01ee5643f792a0b596235f69ddad2a3"} {"level":"info","ts":"2026-07-10T19:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32d8275eaf54bd3ccfc41cded099c761b01ee5643f792a0b596235f69ddad2a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b47d8ec689916de70312dcf8bf670bce239e3ca38b57e9408529100fdc9f667","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32d8275eaf54bd3ccfc41cded099c761b01ee5643f792a0b596235f69ddad2a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:09:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:09:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["32d8275eaf54bd3ccfc41cded099c761b01ee5643f792a0b596235f69ddad2a3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-10T19:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"32d8275eaf54bd3ccfc41cded099c761b01ee5643f792a0b596235f69ddad2a3","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"32d8275eaf54bd3ccfc41cded099c761b01ee5643f792a0b596235f69ddad2a3\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-10T19:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32d8275eaf54bd3ccfc41cded099c761b01ee5643f792a0b596235f69ddad2a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:09:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:09:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["32d8275eaf54bd3ccfc41cded099c761b01ee5643f792a0b596235f69ddad2a3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b47d8ec689916de70312dcf8bf670bce239e3ca38b57e9408529100fdc9f667"} {"level":"info","ts":"2026-07-10T19:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32d8275eaf54bd3ccfc41cded099c761b01ee5643f792a0b596235f69ddad2a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32d8275eaf54bd3ccfc41cded099c761b01ee5643f792a0b596235f69ddad2a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32d8275eaf54bd3ccfc41cded099c761b01ee5643f792a0b596235f69ddad2a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:09:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:09:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32d8275eaf54bd3ccfc41cded099c761b01ee5643f792a0b596235f69ddad2a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32d8275eaf54bd3ccfc41cded099c761b01ee5643f792a0b596235f69ddad2a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:09:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:09:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32d8275eaf54bd3ccfc41cded099c761b01ee5643f792a0b596235f69ddad2a3"} {"level":"error","ts":"2026-07-10T19:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"32d8275eaf54bd3ccfc41cded099c761b01ee5643f792a0b596235f69ddad2a3","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"32d8275eaf54bd3ccfc41cded099c761b01ee5643f792a0b596235f69ddad2a3\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-10T19:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b47d8ec689916de70312dcf8bf670bce239e3ca38b57e9408529100fdc9f667","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:09:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:09:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8b47d8ec689916de70312dcf8bf670bce239e3ca38b57e9408529100fdc9f667"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b47d8ec689916de70312dcf8bf670bce239e3ca38b57e9408529100fdc9f667","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32d8275eaf54bd3ccfc41cded099c761b01ee5643f792a0b596235f69ddad2a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b47d8ec689916de70312dcf8bf670bce239e3ca38b57e9408529100fdc9f667","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32d8275eaf54bd3ccfc41cded099c761b01ee5643f792a0b596235f69ddad2a3"} {"level":"debug","ts":"2026-07-10T19:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"355bb16e15a061f2350bea7a31b1d5869273cb5330d5a5ed20c2f54ece6372e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:09:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:09:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b47d8ec689916de70312dcf8bf670bce239e3ca38b57e9408529100fdc9f667"} {"level":"info","ts":"2026-07-10T19:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"355bb16e15a061f2350bea7a31b1d5869273cb5330d5a5ed20c2f54ece6372e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"355bb16e15a061f2350bea7a31b1d5869273cb5330d5a5ed20c2f54ece6372e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:09:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:09:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"355bb16e15a061f2350bea7a31b1d5869273cb5330d5a5ed20c2f54ece6372e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32d8275eaf54bd3ccfc41cded099c761b01ee5643f792a0b596235f69ddad2a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:09:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:09:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["32d8275eaf54bd3ccfc41cded099c761b01ee5643f792a0b596235f69ddad2a3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/355bb16e15a061f2350bea7a31b1d5869273cb5330d5a5ed20c2f54ece6372e5"} {"level":"info","ts":"2026-07-10T19:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32d8275eaf54bd3ccfc41cded099c761b01ee5643f792a0b596235f69ddad2a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"355bb16e15a061f2350bea7a31b1d5869273cb5330d5a5ed20c2f54ece6372e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32d8275eaf54bd3ccfc41cded099c761b01ee5643f792a0b596235f69ddad2a3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/355bb16e15a061f2350bea7a31b1d5869273cb5330d5a5ed20c2f54ece6372e5"} {"level":"debug","ts":"2026-07-10T19:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"355bb16e15a061f2350bea7a31b1d5869273cb5330d5a5ed20c2f54ece6372e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:09:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:09:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["355bb16e15a061f2350bea7a31b1d5869273cb5330d5a5ed20c2f54ece6372e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32d8275eaf54bd3ccfc41cded099c761b01ee5643f792a0b596235f69ddad2a3"} {"level":"info","ts":"2026-07-10T19:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"355bb16e15a061f2350bea7a31b1d5869273cb5330d5a5ed20c2f54ece6372e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"355bb16e15a061f2350bea7a31b1d5869273cb5330d5a5ed20c2f54ece6372e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:09:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:09:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"355bb16e15a061f2350bea7a31b1d5869273cb5330d5a5ed20c2f54ece6372e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"981d3db066dfde8e42076eba630faaa1c399621ff67a9cd7fb8c0e502f910df1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:09:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:09:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/355bb16e15a061f2350bea7a31b1d5869273cb5330d5a5ed20c2f54ece6372e5"} {"level":"info","ts":"2026-07-10T19:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"981d3db066dfde8e42076eba630faaa1c399621ff67a9cd7fb8c0e502f910df1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"355bb16e15a061f2350bea7a31b1d5869273cb5330d5a5ed20c2f54ece6372e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:09:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:09:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["355bb16e15a061f2350bea7a31b1d5869273cb5330d5a5ed20c2f54ece6372e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"355bb16e15a061f2350bea7a31b1d5869273cb5330d5a5ed20c2f54ece6372e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"981d3db066dfde8e42076eba630faaa1c399621ff67a9cd7fb8c0e502f910df1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:09:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:09:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/981d3db066dfde8e42076eba630faaa1c399621ff67a9cd7fb8c0e502f910df1"} {"level":"info","ts":"2026-07-10T19:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"981d3db066dfde8e42076eba630faaa1c399621ff67a9cd7fb8c0e502f910df1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"355bb16e15a061f2350bea7a31b1d5869273cb5330d5a5ed20c2f54ece6372e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:09:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:09:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/355bb16e15a061f2350bea7a31b1d5869273cb5330d5a5ed20c2f54ece6372e5"} {"level":"info","ts":"2026-07-10T19:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"355bb16e15a061f2350bea7a31b1d5869273cb5330d5a5ed20c2f54ece6372e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"981d3db066dfde8e42076eba630faaa1c399621ff67a9cd7fb8c0e502f910df1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"355bb16e15a061f2350bea7a31b1d5869273cb5330d5a5ed20c2f54ece6372e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:09:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:09:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["355bb16e15a061f2350bea7a31b1d5869273cb5330d5a5ed20c2f54ece6372e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"355bb16e15a061f2350bea7a31b1d5869273cb5330d5a5ed20c2f54ece6372e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"355bb16e15a061f2350bea7a31b1d5869273cb5330d5a5ed20c2f54ece6372e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:09:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:09:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["355bb16e15a061f2350bea7a31b1d5869273cb5330d5a5ed20c2f54ece6372e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/981d3db066dfde8e42076eba630faaa1c399621ff67a9cd7fb8c0e502f910df1"} {"level":"error","ts":"2026-07-10T19:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"355bb16e15a061f2350bea7a31b1d5869273cb5330d5a5ed20c2f54ece6372e5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"355bb16e15a061f2350bea7a31b1d5869273cb5330d5a5ed20c2f54ece6372e5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-10T19:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"981d3db066dfde8e42076eba630faaa1c399621ff67a9cd7fb8c0e502f910df1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:09:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:09:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["981d3db066dfde8e42076eba630faaa1c399621ff67a9cd7fb8c0e502f910df1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"981d3db066dfde8e42076eba630faaa1c399621ff67a9cd7fb8c0e502f910df1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"355bb16e15a061f2350bea7a31b1d5869273cb5330d5a5ed20c2f54ece6372e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:09:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:09:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/355bb16e15a061f2350bea7a31b1d5869273cb5330d5a5ed20c2f54ece6372e5"} {"level":"info","ts":"2026-07-10T19:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"355bb16e15a061f2350bea7a31b1d5869273cb5330d5a5ed20c2f54ece6372e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"981d3db066dfde8e42076eba630faaa1c399621ff67a9cd7fb8c0e502f910df1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:09:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:09:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/981d3db066dfde8e42076eba630faaa1c399621ff67a9cd7fb8c0e502f910df1"} {"level":"info","ts":"2026-07-10T19:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"981d3db066dfde8e42076eba630faaa1c399621ff67a9cd7fb8c0e502f910df1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"355bb16e15a061f2350bea7a31b1d5869273cb5330d5a5ed20c2f54ece6372e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"981d3db066dfde8e42076eba630faaa1c399621ff67a9cd7fb8c0e502f910df1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:09:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:09:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["981d3db066dfde8e42076eba630faaa1c399621ff67a9cd7fb8c0e502f910df1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"981d3db066dfde8e42076eba630faaa1c399621ff67a9cd7fb8c0e502f910df1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"981d3db066dfde8e42076eba630faaa1c399621ff67a9cd7fb8c0e502f910df1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:09:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:09:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["981d3db066dfde8e42076eba630faaa1c399621ff67a9cd7fb8c0e502f910df1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/355bb16e15a061f2350bea7a31b1d5869273cb5330d5a5ed20c2f54ece6372e5"} {"level":"error","ts":"2026-07-10T19:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"981d3db066dfde8e42076eba630faaa1c399621ff67a9cd7fb8c0e502f910df1","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"981d3db066dfde8e42076eba630faaa1c399621ff67a9cd7fb8c0e502f910df1\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-10T19:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"355bb16e15a061f2350bea7a31b1d5869273cb5330d5a5ed20c2f54ece6372e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:09:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:09:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["355bb16e15a061f2350bea7a31b1d5869273cb5330d5a5ed20c2f54ece6372e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"355bb16e15a061f2350bea7a31b1d5869273cb5330d5a5ed20c2f54ece6372e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"981d3db066dfde8e42076eba630faaa1c399621ff67a9cd7fb8c0e502f910df1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:09:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:09:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/981d3db066dfde8e42076eba630faaa1c399621ff67a9cd7fb8c0e502f910df1"} {"level":"info","ts":"2026-07-10T19:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"981d3db066dfde8e42076eba630faaa1c399621ff67a9cd7fb8c0e502f910df1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"355bb16e15a061f2350bea7a31b1d5869273cb5330d5a5ed20c2f54ece6372e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:09:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:09:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"355bb16e15a061f2350bea7a31b1d5869273cb5330d5a5ed20c2f54ece6372e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"981d3db066dfde8e42076eba630faaa1c399621ff67a9cd7fb8c0e502f910df1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:09:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:09:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["981d3db066dfde8e42076eba630faaa1c399621ff67a9cd7fb8c0e502f910df1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/355bb16e15a061f2350bea7a31b1d5869273cb5330d5a5ed20c2f54ece6372e5"} {"level":"info","ts":"2026-07-10T19:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"981d3db066dfde8e42076eba630faaa1c399621ff67a9cd7fb8c0e502f910df1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"355bb16e15a061f2350bea7a31b1d5869273cb5330d5a5ed20c2f54ece6372e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:09:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:09:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["355bb16e15a061f2350bea7a31b1d5869273cb5330d5a5ed20c2f54ece6372e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/981d3db066dfde8e42076eba630faaa1c399621ff67a9cd7fb8c0e502f910df1"} {"level":"info","ts":"2026-07-10T19:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"355bb16e15a061f2350bea7a31b1d5869273cb5330d5a5ed20c2f54ece6372e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"981d3db066dfde8e42076eba630faaa1c399621ff67a9cd7fb8c0e502f910df1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"355bb16e15a061f2350bea7a31b1d5869273cb5330d5a5ed20c2f54ece6372e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:09:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:09:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"355bb16e15a061f2350bea7a31b1d5869273cb5330d5a5ed20c2f54ece6372e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"355bb16e15a061f2350bea7a31b1d5869273cb5330d5a5ed20c2f54ece6372e5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/355bb16e15a061f2350bea7a31b1d5869273cb5330d5a5ed20c2f54ece6372e5"} {"level":"debug","ts":"2026-07-10T19:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"355bb16e15a061f2350bea7a31b1d5869273cb5330d5a5ed20c2f54ece6372e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:09:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:09:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["355bb16e15a061f2350bea7a31b1d5869273cb5330d5a5ed20c2f54ece6372e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"355bb16e15a061f2350bea7a31b1d5869273cb5330d5a5ed20c2f54ece6372e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"355bb16e15a061f2350bea7a31b1d5869273cb5330d5a5ed20c2f54ece6372e5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/981d3db066dfde8e42076eba630faaa1c399621ff67a9cd7fb8c0e502f910df1"} {"level":"info","ts":"2026-07-10T19:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/355bb16e15a061f2350bea7a31b1d5869273cb5330d5a5ed20c2f54ece6372e5"} {"level":"debug","ts":"2026-07-10T19:09:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"300e6ea3b19e6a2db029a3371b8b73cc52054eb1820d9981ee0f4b42d575c3de","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:09:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/300e6ea3b19e6a2db029a3371b8b73cc52054eb1820d9981ee0f4b42d575c3de"} {"level":"debug","ts":"2026-07-10T19:09:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf6d234abf242f57e80acbb12a65cedec061a11dadcd51ad29a31224237f2e2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:09:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:09:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:09:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf6d234abf242f57e80acbb12a65cedec061a11dadcd51ad29a31224237f2e2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:09:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf6d234abf242f57e80acbb12a65cedec061a11dadcd51ad29a31224237f2e2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:09:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf6d234abf242f57e80acbb12a65cedec061a11dadcd51ad29a31224237f2e2e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:09:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf6d234abf242f57e80acbb12a65cedec061a11dadcd51ad29a31224237f2e2e"} {"level":"debug","ts":"2026-07-10T19:09:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf6d234abf242f57e80acbb12a65cedec061a11dadcd51ad29a31224237f2e2e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:09:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf6d234abf242f57e80acbb12a65cedec061a11dadcd51ad29a31224237f2e2e"} {"level":"debug","ts":"2026-07-10T19:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf6d234abf242f57e80acbb12a65cedec061a11dadcd51ad29a31224237f2e2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:09:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:09:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cf6d234abf242f57e80acbb12a65cedec061a11dadcd51ad29a31224237f2e2e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf6d234abf242f57e80acbb12a65cedec061a11dadcd51ad29a31224237f2e2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf6d234abf242f57e80acbb12a65cedec061a11dadcd51ad29a31224237f2e2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:09:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:09:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf6d234abf242f57e80acbb12a65cedec061a11dadcd51ad29a31224237f2e2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf6d234abf242f57e80acbb12a65cedec061a11dadcd51ad29a31224237f2e2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf6d234abf242f57e80acbb12a65cedec061a11dadcd51ad29a31224237f2e2e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf6d234abf242f57e80acbb12a65cedec061a11dadcd51ad29a31224237f2e2e"} {"level":"debug","ts":"2026-07-10T19:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf6d234abf242f57e80acbb12a65cedec061a11dadcd51ad29a31224237f2e2e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf6d234abf242f57e80acbb12a65cedec061a11dadcd51ad29a31224237f2e2e"} {"level":"debug","ts":"2026-07-10T19:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf6d234abf242f57e80acbb12a65cedec061a11dadcd51ad29a31224237f2e2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:09:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:09:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cf6d234abf242f57e80acbb12a65cedec061a11dadcd51ad29a31224237f2e2e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf6d234abf242f57e80acbb12a65cedec061a11dadcd51ad29a31224237f2e2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf6d234abf242f57e80acbb12a65cedec061a11dadcd51ad29a31224237f2e2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:09:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:09:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf6d234abf242f57e80acbb12a65cedec061a11dadcd51ad29a31224237f2e2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"981d3db066dfde8e42076eba630faaa1c399621ff67a9cd7fb8c0e502f910df1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf6d234abf242f57e80acbb12a65cedec061a11dadcd51ad29a31224237f2e2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf6d234abf242f57e80acbb12a65cedec061a11dadcd51ad29a31224237f2e2e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf6d234abf242f57e80acbb12a65cedec061a11dadcd51ad29a31224237f2e2e"} {"level":"debug","ts":"2026-07-10T19:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf6d234abf242f57e80acbb12a65cedec061a11dadcd51ad29a31224237f2e2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:09:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:09:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cf6d234abf242f57e80acbb12a65cedec061a11dadcd51ad29a31224237f2e2e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/981d3db066dfde8e42076eba630faaa1c399621ff67a9cd7fb8c0e502f910df1"} {"level":"info","ts":"2026-07-10T19:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf6d234abf242f57e80acbb12a65cedec061a11dadcd51ad29a31224237f2e2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf6d234abf242f57e80acbb12a65cedec061a11dadcd51ad29a31224237f2e2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:09:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:09:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf6d234abf242f57e80acbb12a65cedec061a11dadcd51ad29a31224237f2e2e"} {"level":"info","ts":"2026-07-10T19:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf6d234abf242f57e80acbb12a65cedec061a11dadcd51ad29a31224237f2e2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf6d234abf242f57e80acbb12a65cedec061a11dadcd51ad29a31224237f2e2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf6d234abf242f57e80acbb12a65cedec061a11dadcd51ad29a31224237f2e2e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf6d234abf242f57e80acbb12a65cedec061a11dadcd51ad29a31224237f2e2e"} {"level":"debug","ts":"2026-07-10T19:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf6d234abf242f57e80acbb12a65cedec061a11dadcd51ad29a31224237f2e2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b74401fb0fda16086aa2596af3af21c97b9b74a11b13f3f1a95a859eacbec9f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf6d234abf242f57e80acbb12a65cedec061a11dadcd51ad29a31224237f2e2e"} {"level":"info","ts":"2026-07-10T19:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b74401fb0fda16086aa2596af3af21c97b9b74a11b13f3f1a95a859eacbec9f"} {"level":"debug","ts":"2026-07-10T19:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf6d234abf242f57e80acbb12a65cedec061a11dadcd51ad29a31224237f2e2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:09:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:09:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cf6d234abf242f57e80acbb12a65cedec061a11dadcd51ad29a31224237f2e2e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf6d234abf242f57e80acbb12a65cedec061a11dadcd51ad29a31224237f2e2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf6d234abf242f57e80acbb12a65cedec061a11dadcd51ad29a31224237f2e2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:09:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:09:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf6d234abf242f57e80acbb12a65cedec061a11dadcd51ad29a31224237f2e2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf6d234abf242f57e80acbb12a65cedec061a11dadcd51ad29a31224237f2e2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf6d234abf242f57e80acbb12a65cedec061a11dadcd51ad29a31224237f2e2e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf6d234abf242f57e80acbb12a65cedec061a11dadcd51ad29a31224237f2e2e"} {"level":"debug","ts":"2026-07-10T19:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf6d234abf242f57e80acbb12a65cedec061a11dadcd51ad29a31224237f2e2e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf6d234abf242f57e80acbb12a65cedec061a11dadcd51ad29a31224237f2e2e"} {"level":"debug","ts":"2026-07-10T19:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf6d234abf242f57e80acbb12a65cedec061a11dadcd51ad29a31224237f2e2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:09:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:09:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cf6d234abf242f57e80acbb12a65cedec061a11dadcd51ad29a31224237f2e2e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf6d234abf242f57e80acbb12a65cedec061a11dadcd51ad29a31224237f2e2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf6d234abf242f57e80acbb12a65cedec061a11dadcd51ad29a31224237f2e2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:09:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:09:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf6d234abf242f57e80acbb12a65cedec061a11dadcd51ad29a31224237f2e2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf6d234abf242f57e80acbb12a65cedec061a11dadcd51ad29a31224237f2e2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf6d234abf242f57e80acbb12a65cedec061a11dadcd51ad29a31224237f2e2e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf6d234abf242f57e80acbb12a65cedec061a11dadcd51ad29a31224237f2e2e"} {"level":"debug","ts":"2026-07-10T19:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf6d234abf242f57e80acbb12a65cedec061a11dadcd51ad29a31224237f2e2e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf6d234abf242f57e80acbb12a65cedec061a11dadcd51ad29a31224237f2e2e"} {"level":"debug","ts":"2026-07-10T19:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36926324f558b8d47d838eb68bef8b32ac3885019930684ae92ea57eb447255f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:09:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:09:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36926324f558b8d47d838eb68bef8b32ac3885019930684ae92ea57eb447255f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36926324f558b8d47d838eb68bef8b32ac3885019930684ae92ea57eb447255f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf6d234abf242f57e80acbb12a65cedec061a11dadcd51ad29a31224237f2e2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:09:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:09:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cf6d234abf242f57e80acbb12a65cedec061a11dadcd51ad29a31224237f2e2e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36926324f558b8d47d838eb68bef8b32ac3885019930684ae92ea57eb447255f"} {"level":"info","ts":"2026-07-10T19:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf6d234abf242f57e80acbb12a65cedec061a11dadcd51ad29a31224237f2e2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36926324f558b8d47d838eb68bef8b32ac3885019930684ae92ea57eb447255f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf6d234abf242f57e80acbb12a65cedec061a11dadcd51ad29a31224237f2e2e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36926324f558b8d47d838eb68bef8b32ac3885019930684ae92ea57eb447255f"} {"level":"debug","ts":"2026-07-10T19:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36926324f558b8d47d838eb68bef8b32ac3885019930684ae92ea57eb447255f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:09:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:09:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["36926324f558b8d47d838eb68bef8b32ac3885019930684ae92ea57eb447255f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf6d234abf242f57e80acbb12a65cedec061a11dadcd51ad29a31224237f2e2e"} {"level":"info","ts":"2026-07-10T19:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36926324f558b8d47d838eb68bef8b32ac3885019930684ae92ea57eb447255f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36926324f558b8d47d838eb68bef8b32ac3885019930684ae92ea57eb447255f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:09:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:09:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36926324f558b8d47d838eb68bef8b32ac3885019930684ae92ea57eb447255f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36926324f558b8d47d838eb68bef8b32ac3885019930684ae92ea57eb447255f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36926324f558b8d47d838eb68bef8b32ac3885019930684ae92ea57eb447255f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36926324f558b8d47d838eb68bef8b32ac3885019930684ae92ea57eb447255f"} {"level":"debug","ts":"2026-07-10T19:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b47d8ec689916de70312dcf8bf670bce239e3ca38b57e9408529100fdc9f667","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36926324f558b8d47d838eb68bef8b32ac3885019930684ae92ea57eb447255f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36926324f558b8d47d838eb68bef8b32ac3885019930684ae92ea57eb447255f"} {"level":"info","ts":"2026-07-10T19:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b47d8ec689916de70312dcf8bf670bce239e3ca38b57e9408529100fdc9f667"} {"level":"debug","ts":"2026-07-10T19:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36926324f558b8d47d838eb68bef8b32ac3885019930684ae92ea57eb447255f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:09:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:09:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["36926324f558b8d47d838eb68bef8b32ac3885019930684ae92ea57eb447255f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36926324f558b8d47d838eb68bef8b32ac3885019930684ae92ea57eb447255f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36926324f558b8d47d838eb68bef8b32ac3885019930684ae92ea57eb447255f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:09:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:09:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36926324f558b8d47d838eb68bef8b32ac3885019930684ae92ea57eb447255f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36926324f558b8d47d838eb68bef8b32ac3885019930684ae92ea57eb447255f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36926324f558b8d47d838eb68bef8b32ac3885019930684ae92ea57eb447255f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36926324f558b8d47d838eb68bef8b32ac3885019930684ae92ea57eb447255f"} {"level":"debug","ts":"2026-07-10T19:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd6c442a3165f1d1b0f79742711ab07fbeea4c8c529f1e2c8033d8956080c15c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36926324f558b8d47d838eb68bef8b32ac3885019930684ae92ea57eb447255f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36926324f558b8d47d838eb68bef8b32ac3885019930684ae92ea57eb447255f"} {"level":"info","ts":"2026-07-10T19:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd6c442a3165f1d1b0f79742711ab07fbeea4c8c529f1e2c8033d8956080c15c"} {"level":"debug","ts":"2026-07-10T19:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36926324f558b8d47d838eb68bef8b32ac3885019930684ae92ea57eb447255f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:09:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:09:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["36926324f558b8d47d838eb68bef8b32ac3885019930684ae92ea57eb447255f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36926324f558b8d47d838eb68bef8b32ac3885019930684ae92ea57eb447255f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36926324f558b8d47d838eb68bef8b32ac3885019930684ae92ea57eb447255f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:09:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:09:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36926324f558b8d47d838eb68bef8b32ac3885019930684ae92ea57eb447255f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36926324f558b8d47d838eb68bef8b32ac3885019930684ae92ea57eb447255f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36926324f558b8d47d838eb68bef8b32ac3885019930684ae92ea57eb447255f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36926324f558b8d47d838eb68bef8b32ac3885019930684ae92ea57eb447255f"} {"level":"debug","ts":"2026-07-10T19:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ac5b9e820f4dcaeeecf2cbeaa0942f9d20655987860d4d8e069540730763318","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36926324f558b8d47d838eb68bef8b32ac3885019930684ae92ea57eb447255f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36926324f558b8d47d838eb68bef8b32ac3885019930684ae92ea57eb447255f"} {"level":"debug","ts":"2026-07-10T19:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35322e841f878a999b9fb319d53b4ede55fab1a3f4e612b55f96e99b3dae2210","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ac5b9e820f4dcaeeecf2cbeaa0942f9d20655987860d4d8e069540730763318"} {"level":"debug","ts":"2026-07-10T19:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36926324f558b8d47d838eb68bef8b32ac3885019930684ae92ea57eb447255f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:09:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:09:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["36926324f558b8d47d838eb68bef8b32ac3885019930684ae92ea57eb447255f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35322e841f878a999b9fb319d53b4ede55fab1a3f4e612b55f96e99b3dae2210"} {"level":"info","ts":"2026-07-10T19:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36926324f558b8d47d838eb68bef8b32ac3885019930684ae92ea57eb447255f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36926324f558b8d47d838eb68bef8b32ac3885019930684ae92ea57eb447255f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:09:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:09:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36926324f558b8d47d838eb68bef8b32ac3885019930684ae92ea57eb447255f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36926324f558b8d47d838eb68bef8b32ac3885019930684ae92ea57eb447255f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36926324f558b8d47d838eb68bef8b32ac3885019930684ae92ea57eb447255f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36926324f558b8d47d838eb68bef8b32ac3885019930684ae92ea57eb447255f"} {"level":"debug","ts":"2026-07-10T19:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36926324f558b8d47d838eb68bef8b32ac3885019930684ae92ea57eb447255f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36926324f558b8d47d838eb68bef8b32ac3885019930684ae92ea57eb447255f"} {"level":"debug","ts":"2026-07-10T19:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36926324f558b8d47d838eb68bef8b32ac3885019930684ae92ea57eb447255f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:09:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:09:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["36926324f558b8d47d838eb68bef8b32ac3885019930684ae92ea57eb447255f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36926324f558b8d47d838eb68bef8b32ac3885019930684ae92ea57eb447255f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36926324f558b8d47d838eb68bef8b32ac3885019930684ae92ea57eb447255f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:09:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:09:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36926324f558b8d47d838eb68bef8b32ac3885019930684ae92ea57eb447255f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36926324f558b8d47d838eb68bef8b32ac3885019930684ae92ea57eb447255f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36926324f558b8d47d838eb68bef8b32ac3885019930684ae92ea57eb447255f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36926324f558b8d47d838eb68bef8b32ac3885019930684ae92ea57eb447255f"} {"level":"debug","ts":"2026-07-10T19:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36926324f558b8d47d838eb68bef8b32ac3885019930684ae92ea57eb447255f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36926324f558b8d47d838eb68bef8b32ac3885019930684ae92ea57eb447255f"} {"level":"debug","ts":"2026-07-10T19:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d111f1b904ec71500af0937736dfc86a65df67c92bdff77a7ca400f954d868c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:09:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:09:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d111f1b904ec71500af0937736dfc86a65df67c92bdff77a7ca400f954d868c4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d111f1b904ec71500af0937736dfc86a65df67c92bdff77a7ca400f954d868c4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d111f1b904ec71500af0937736dfc86a65df67c92bdff77a7ca400f954d868c4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d111f1b904ec71500af0937736dfc86a65df67c92bdff77a7ca400f954d868c4"} {"level":"debug","ts":"2026-07-10T19:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36926324f558b8d47d838eb68bef8b32ac3885019930684ae92ea57eb447255f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:09:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:09:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["36926324f558b8d47d838eb68bef8b32ac3885019930684ae92ea57eb447255f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d111f1b904ec71500af0937736dfc86a65df67c92bdff77a7ca400f954d868c4"} {"level":"info","ts":"2026-07-10T19:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36926324f558b8d47d838eb68bef8b32ac3885019930684ae92ea57eb447255f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d111f1b904ec71500af0937736dfc86a65df67c92bdff77a7ca400f954d868c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:09:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:09:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d111f1b904ec71500af0937736dfc86a65df67c92bdff77a7ca400f954d868c4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:09:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d111f1b904ec71500af0937736dfc86a65df67c92bdff77a7ca400f954d868c4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:09:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36926324f558b8d47d838eb68bef8b32ac3885019930684ae92ea57eb447255f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:09:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:09:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:09:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36926324f558b8d47d838eb68bef8b32ac3885019930684ae92ea57eb447255f"} {"level":"info","ts":"2026-07-10T19:09:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36926324f558b8d47d838eb68bef8b32ac3885019930684ae92ea57eb447255f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:09:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d111f1b904ec71500af0937736dfc86a65df67c92bdff77a7ca400f954d868c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:09:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:09:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:09:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d111f1b904ec71500af0937736dfc86a65df67c92bdff77a7ca400f954d868c4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:09:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36926324f558b8d47d838eb68bef8b32ac3885019930684ae92ea57eb447255f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:09:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:09:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["36926324f558b8d47d838eb68bef8b32ac3885019930684ae92ea57eb447255f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:09:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d111f1b904ec71500af0937736dfc86a65df67c92bdff77a7ca400f954d868c4"} {"level":"info","ts":"2026-07-10T19:09:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36926324f558b8d47d838eb68bef8b32ac3885019930684ae92ea57eb447255f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:09:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d111f1b904ec71500af0937736dfc86a65df67c92bdff77a7ca400f954d868c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:09:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:09:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d111f1b904ec71500af0937736dfc86a65df67c92bdff77a7ca400f954d868c4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:09:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36926324f558b8d47d838eb68bef8b32ac3885019930684ae92ea57eb447255f"} {"level":"info","ts":"2026-07-10T19:09:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d111f1b904ec71500af0937736dfc86a65df67c92bdff77a7ca400f954d868c4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:09:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c957ee355a62da6ea46a4d3beb6abe4e08f8ff25da7e7c2e9d4eaf159f12e9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:09:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36926324f558b8d47d838eb68bef8b32ac3885019930684ae92ea57eb447255f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:09:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87166a0df099b90714872bf29d9e7e9ef5bff83567cec591690c34df8f3e2471","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:09:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d111f1b904ec71500af0937736dfc86a65df67c92bdff77a7ca400f954d868c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:09:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:09:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:09:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d111f1b904ec71500af0937736dfc86a65df67c92bdff77a7ca400f954d868c4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:09:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d111f1b904ec71500af0937736dfc86a65df67c92bdff77a7ca400f954d868c4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:09:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d111f1b904ec71500af0937736dfc86a65df67c92bdff77a7ca400f954d868c4"} {"level":"debug","ts":"2026-07-10T19:09:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d111f1b904ec71500af0937736dfc86a65df67c92bdff77a7ca400f954d868c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:09:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:09:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d111f1b904ec71500af0937736dfc86a65df67c92bdff77a7ca400f954d868c4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:09:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d111f1b904ec71500af0937736dfc86a65df67c92bdff77a7ca400f954d868c4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:09:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d111f1b904ec71500af0937736dfc86a65df67c92bdff77a7ca400f954d868c4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:09:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c957ee355a62da6ea46a4d3beb6abe4e08f8ff25da7e7c2e9d4eaf159f12e9f"} {"level":"info","ts":"2026-07-10T19:09:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87166a0df099b90714872bf29d9e7e9ef5bff83567cec591690c34df8f3e2471"} {"level":"debug","ts":"2026-07-10T19:09:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c845e0097e502f097409759210db0d3c4946cbe41566cc6e9180dda83cc25ea0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:09:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36926324f558b8d47d838eb68bef8b32ac3885019930684ae92ea57eb447255f"} {"level":"info","ts":"2026-07-10T19:09:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d111f1b904ec71500af0937736dfc86a65df67c92bdff77a7ca400f954d868c4"} {"level":"info","ts":"2026-07-10T19:09:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c845e0097e502f097409759210db0d3c4946cbe41566cc6e9180dda83cc25ea0"} {"level":"debug","ts":"2026-07-10T19:09:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"355bb16e15a061f2350bea7a31b1d5869273cb5330d5a5ed20c2f54ece6372e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:09:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"141aaf22f2de77ffdee50da40d794a3b0863bac5c7eb7603eae3ebcf00f84e96","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:09:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dfe8ef1a9af1a1204ec43304f443a5ef3a6e3fe57a18deb1e094e93f15b7548d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:09:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/355bb16e15a061f2350bea7a31b1d5869273cb5330d5a5ed20c2f54ece6372e5"} {"level":"debug","ts":"2026-07-10T19:09:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eace3bb039c229aa713a42c97b5feaf6bcf93778910a0dcae5888dc35d67d31c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:09:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/141aaf22f2de77ffdee50da40d794a3b0863bac5c7eb7603eae3ebcf00f84e96"} {"level":"debug","ts":"2026-07-10T19:09:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eaf56c17828d587f7339a43f9896f6233f42805c5d50f03b38ee155aaf7483fe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:09:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"297abd0bbed03231b5142955f55b8b2e7cd95361126e006d32dfd770ad54e04b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:09:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dfe8ef1a9af1a1204ec43304f443a5ef3a6e3fe57a18deb1e094e93f15b7548d"} {"level":"debug","ts":"2026-07-10T19:09:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90714ee245d02f2cd2ac94e94cd4bcf7130f105565bedf65f8257e6d8ec92b92","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:09:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eace3bb039c229aa713a42c97b5feaf6bcf93778910a0dcae5888dc35d67d31c"} {"level":"debug","ts":"2026-07-10T19:09:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37c2aac016442a0ea3af875455f9636f9678e55ab49194e7078ff69a97fcb0ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:09:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32d8275eaf54bd3ccfc41cded099c761b01ee5643f792a0b596235f69ddad2a3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:09:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eaf56c17828d587f7339a43f9896f6233f42805c5d50f03b38ee155aaf7483fe"} {"level":"debug","ts":"2026-07-10T19:09:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"003e8f7c9ad8f092e2a79ab25d6edd6d29cbd83f7a7432532f05bd22de2de6cf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:09:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/297abd0bbed03231b5142955f55b8b2e7cd95361126e006d32dfd770ad54e04b"} {"level":"debug","ts":"2026-07-10T19:09:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9bfc637a6a83c4b194839158e6f3a76e6ce779f29d8f75bf264072efa3261de","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:09:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90714ee245d02f2cd2ac94e94cd4bcf7130f105565bedf65f8257e6d8ec92b92"} {"level":"info","ts":"2026-07-10T19:09:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37c2aac016442a0ea3af875455f9636f9678e55ab49194e7078ff69a97fcb0ee"} {"level":"info","ts":"2026-07-10T19:09:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32d8275eaf54bd3ccfc41cded099c761b01ee5643f792a0b596235f69ddad2a3"} {"level":"info","ts":"2026-07-10T19:09:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/003e8f7c9ad8f092e2a79ab25d6edd6d29cbd83f7a7432532f05bd22de2de6cf"} {"level":"info","ts":"2026-07-10T19:09:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9bfc637a6a83c4b194839158e6f3a76e6ce779f29d8f75bf264072efa3261de"} {"level":"info","ts":"2026-07-10T19:09:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c588800c-b934-4627-af95-f8c1080a11de","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.16:45294","PortSpecifier":{"PortValue":45294}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c588800c-b934-4627-af95-f8c1080a11de","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-33ca20.apps.d363791c-37c4-4115-b4f0-e1034407046f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T19:09:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c588800c-b934-4627-af95-f8c1080a11de","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.16:45294","PortSpecifier":{"PortValue":45294}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783710559,"nanos":651290464},"http":{"id":"c588800c-b934-4627-af95-f8c1080a11de","method":"POST","headers":{":authority":"e2e-shared-a-33ca20.apps.d363791c-37c4-4115-b4f0-e1034407046f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T19:09:19Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c588800c-b934-4627-af95-f8c1080a11de","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T19:09:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c588800c-b934-4627-af95-f8c1080a11de","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6dd43bae-5856-4bf7-aa31-595588c0c7b9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f4bfb603-1d1c-4dfe-aa58-2bd1826c9b75"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e1034407046f"]}} {"level":"debug","ts":"2026-07-10T19:09:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c588800c-b934-4627-af95-f8c1080a11de","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e1034407046f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f4bfb603-1d1c-4dfe-aa58-2bd1826c9b75"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6dd43bae-5856-4bf7-aa31-595588c0c7b9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"dfe8ef1a9af1a1204ec43304f443a5ef3a6e3fe57a18deb1e094e93f15b7548d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-33ca20.apps.d363791c-37c4-4115-b4f0-e1034407046f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T19:09:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c588800c-b934-4627-af95-f8c1080a11de","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T19:09:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c588800c-b934-4627-af95-f8c1080a11de","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T19:09:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c588800c-b934-4627-af95-f8c1080a11de","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-33ca20/sub-test-model-33ca20\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T19:09:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c588800c-b934-4627-af95-f8c1080a11de","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T19:09:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c588800c-b934-4627-af95-f8c1080a11de","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-10T19:09:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c588800c-b934-4627-af95-f8c1080a11de","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-10T19:09:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c588800c-b934-4627-af95-f8c1080a11de","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T19:09:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c588800c-b934-4627-af95-f8c1080a11de","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T19:09:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b3aaad12-7129-4b53-bf4e-151551ea3e31","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.16:57492","PortSpecifier":{"PortValue":57492}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b3aaad12-7129-4b53-bf4e-151551ea3e31","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-7b46a3.apps.d363791c-37c4-4115-b4f0-e1034407046f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T19:09:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b3aaad12-7129-4b53-bf4e-151551ea3e31","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.16:57492","PortSpecifier":{"PortValue":57492}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783710559,"nanos":694732895},"http":{"id":"b3aaad12-7129-4b53-bf4e-151551ea3e31","method":"POST","headers":{":authority":"e2e-shared-b-7b46a3.apps.d363791c-37c4-4115-b4f0-e1034407046f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T19:09:19Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b3aaad12-7129-4b53-bf4e-151551ea3e31","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T19:09:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b3aaad12-7129-4b53-bf4e-151551ea3e31","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6dd43bae-5856-4bf7-aa31-595588c0c7b9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f4bfb603-1d1c-4dfe-aa58-2bd1826c9b75"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e1034407046f"]}} {"level":"debug","ts":"2026-07-10T19:09:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b3aaad12-7129-4b53-bf4e-151551ea3e31","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e1034407046f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f4bfb603-1d1c-4dfe-aa58-2bd1826c9b75"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6dd43bae-5856-4bf7-aa31-595588c0c7b9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"35322e841f878a999b9fb319d53b4ede55fab1a3f4e612b55f96e99b3dae2210"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-7b46a3.apps.d363791c-37c4-4115-b4f0-e1034407046f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T19:09:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b3aaad12-7129-4b53-bf4e-151551ea3e31","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T19:09:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b3aaad12-7129-4b53-bf4e-151551ea3e31","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T19:09:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b3aaad12-7129-4b53-bf4e-151551ea3e31","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-7b46a3/sub-test-model-7b46a3\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T19:09:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b3aaad12-7129-4b53-bf4e-151551ea3e31","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T19:09:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b3aaad12-7129-4b53-bf4e-151551ea3e31","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-10T19:09:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b3aaad12-7129-4b53-bf4e-151551ea3e31","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-10T19:09:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b3aaad12-7129-4b53-bf4e-151551ea3e31","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T19:09:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b3aaad12-7129-4b53-bf4e-151551ea3e31","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T19:09:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5a5a5d61-356c-44d1-9f6d-eff4d2612e6c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.16:45306","PortSpecifier":{"PortValue":45306}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5a5a5d61-356c-44d1-9f6d-eff4d2612e6c","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-33ca20.apps.d363791c-37c4-4115-b4f0-e1034407046f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T19:09:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5a5a5d61-356c-44d1-9f6d-eff4d2612e6c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.16:45306","PortSpecifier":{"PortValue":45306}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783710559,"nanos":740078764},"http":{"id":"5a5a5d61-356c-44d1-9f6d-eff4d2612e6c","method":"GET","headers":{":authority":"e2e-shared-a-33ca20.apps.d363791c-37c4-4115-b4f0-e1034407046f.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T19:09:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5a5a5d61-356c-44d1-9f6d-eff4d2612e6c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-BPttahwI3aoiSumZ_ILOGkrKq23g4H1GYqetxqVRIhoQ49xNJKWQ7SYbs71B"} {"level":"debug","ts":"2026-07-10T19:09:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5a5a5d61-356c-44d1-9f6d-eff4d2612e6c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-33ca20.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-BPttahwI3aoiSumZ_ILOGkrKq23g4H1GYqetxqVRIhoQ49xNJKWQ7SYbs71B\"}"} {"level":"debug","ts":"2026-07-10T19:09:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5a5a5d61-356c-44d1-9f6d-eff4d2612e6c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-33ca20.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9068feb1-6e90-4dbf-a0aa-dd31e0a7c0e7","keyName":"e2e-sub-iso-e573ab","subscription":"e2e-a-only-1de810","tenant":"e2e-shared-a-33ca20","userId":"9068feb1-6e90-4dbf-a0aa-dd31e0a7c0e7","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-10T19:09:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5a5a5d61-356c-44d1-9f6d-eff4d2612e6c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T19:09:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5a5a5d61-356c-44d1-9f6d-eff4d2612e6c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T19:09:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5a5a5d61-356c-44d1-9f6d-eff4d2612e6c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T19:09:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5a5a5d61-356c-44d1-9f6d-eff4d2612e6c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-33ca20/sub-test-model-33ca20\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T19:09:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5a5a5d61-356c-44d1-9f6d-eff4d2612e6c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T19:09:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5a5a5d61-356c-44d1-9f6d-eff4d2612e6c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-10T19:09:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5a5a5d61-356c-44d1-9f6d-eff4d2612e6c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-10T19:09:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5a5a5d61-356c-44d1-9f6d-eff4d2612e6c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-1de810"} {"level":"info","ts":"2026-07-10T19:09:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5a5a5d61-356c-44d1-9f6d-eff4d2612e6c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T19:09:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5a5a5d61-356c-44d1-9f6d-eff4d2612e6c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T19:09:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f30d127b-11d8-46d6-ab72-d32caecee3c0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.16:57508","PortSpecifier":{"PortValue":57508}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f30d127b-11d8-46d6-ab72-d32caecee3c0","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-7b46a3.apps.d363791c-37c4-4115-b4f0-e1034407046f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T19:09:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f30d127b-11d8-46d6-ab72-d32caecee3c0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.16:57508","PortSpecifier":{"PortValue":57508}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783710559,"nanos":779943921},"http":{"id":"f30d127b-11d8-46d6-ab72-d32caecee3c0","method":"GET","headers":{":authority":"e2e-shared-b-7b46a3.apps.d363791c-37c4-4115-b4f0-e1034407046f.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T19:09:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f30d127b-11d8-46d6-ab72-d32caecee3c0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-SP3aWSDNsXp7pqLo_RiF9wR1he9alzb8QOYQa0RUZXr47E4uWbQQB8Si0TwK"} {"level":"debug","ts":"2026-07-10T19:09:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f30d127b-11d8-46d6-ab72-d32caecee3c0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-7b46a3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-SP3aWSDNsXp7pqLo_RiF9wR1he9alzb8QOYQa0RUZXr47E4uWbQQB8Si0TwK\"}"} {"level":"debug","ts":"2026-07-10T19:09:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f30d127b-11d8-46d6-ab72-d32caecee3c0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-7b46a3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3b2c2578-da33-438e-9a80-9ff1fd0739e1","keyName":"e2e-sub-iso-978665","subscription":"e2e-b-only-1de810","tenant":"e2e-shared-b-7b46a3","userId":"3b2c2578-da33-438e-9a80-9ff1fd0739e1","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-10T19:09:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f30d127b-11d8-46d6-ab72-d32caecee3c0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T19:09:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f30d127b-11d8-46d6-ab72-d32caecee3c0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T19:09:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f30d127b-11d8-46d6-ab72-d32caecee3c0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T19:09:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f30d127b-11d8-46d6-ab72-d32caecee3c0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-7b46a3/sub-test-model-7b46a3\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T19:09:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f30d127b-11d8-46d6-ab72-d32caecee3c0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T19:09:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f30d127b-11d8-46d6-ab72-d32caecee3c0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-10T19:09:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f30d127b-11d8-46d6-ab72-d32caecee3c0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-10T19:09:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f30d127b-11d8-46d6-ab72-d32caecee3c0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-1de810"} {"level":"info","ts":"2026-07-10T19:09:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f30d127b-11d8-46d6-ab72-d32caecee3c0","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T19:09:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f30d127b-11d8-46d6-ab72-d32caecee3c0","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T19:09:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"626207de-2780-42f7-a728-5aaf2bc96081","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.16:59236","PortSpecifier":{"PortValue":59236}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"626207de-2780-42f7-a728-5aaf2bc96081","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-33ca20.apps.d363791c-37c4-4115-b4f0-e1034407046f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T19:09:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"626207de-2780-42f7-a728-5aaf2bc96081","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.16:59236","PortSpecifier":{"PortValue":59236}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783710578,"nanos":927807747},"http":{"id":"626207de-2780-42f7-a728-5aaf2bc96081","method":"POST","headers":{":authority":"e2e-shared-a-33ca20.apps.d363791c-37c4-4115-b4f0-e1034407046f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T19:09:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"626207de-2780-42f7-a728-5aaf2bc96081","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T19:09:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"626207de-2780-42f7-a728-5aaf2bc96081","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6dd43bae-5856-4bf7-aa31-595588c0c7b9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f4bfb603-1d1c-4dfe-aa58-2bd1826c9b75"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e1034407046f"]}} {"level":"debug","ts":"2026-07-10T19:09:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"626207de-2780-42f7-a728-5aaf2bc96081","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e1034407046f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f4bfb603-1d1c-4dfe-aa58-2bd1826c9b75"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6dd43bae-5856-4bf7-aa31-595588c0c7b9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"dfe8ef1a9af1a1204ec43304f443a5ef3a6e3fe57a18deb1e094e93f15b7548d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-33ca20.apps.d363791c-37c4-4115-b4f0-e1034407046f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T19:09:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"626207de-2780-42f7-a728-5aaf2bc96081","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T19:09:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"626207de-2780-42f7-a728-5aaf2bc96081","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T19:09:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"626207de-2780-42f7-a728-5aaf2bc96081","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-33ca20/sub-test-model-33ca20\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T19:09:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"626207de-2780-42f7-a728-5aaf2bc96081","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T19:09:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"626207de-2780-42f7-a728-5aaf2bc96081","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-10T19:09:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"626207de-2780-42f7-a728-5aaf2bc96081","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-10T19:09:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"626207de-2780-42f7-a728-5aaf2bc96081","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T19:09:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"626207de-2780-42f7-a728-5aaf2bc96081","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T19:09:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"72c095a5-5c2f-48b8-9811-078f27002576","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.16:56646","PortSpecifier":{"PortValue":56646}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"72c095a5-5c2f-48b8-9811-078f27002576","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-7b46a3.apps.d363791c-37c4-4115-b4f0-e1034407046f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T19:09:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"72c095a5-5c2f-48b8-9811-078f27002576","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.16:56646","PortSpecifier":{"PortValue":56646}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783710578,"nanos":961420796},"http":{"id":"72c095a5-5c2f-48b8-9811-078f27002576","method":"POST","headers":{":authority":"e2e-shared-b-7b46a3.apps.d363791c-37c4-4115-b4f0-e1034407046f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T19:09:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"72c095a5-5c2f-48b8-9811-078f27002576","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T19:09:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"72c095a5-5c2f-48b8-9811-078f27002576","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6dd43bae-5856-4bf7-aa31-595588c0c7b9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f4bfb603-1d1c-4dfe-aa58-2bd1826c9b75"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e1034407046f"]}} {"level":"debug","ts":"2026-07-10T19:09:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"72c095a5-5c2f-48b8-9811-078f27002576","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e1034407046f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f4bfb603-1d1c-4dfe-aa58-2bd1826c9b75"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6dd43bae-5856-4bf7-aa31-595588c0c7b9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"35322e841f878a999b9fb319d53b4ede55fab1a3f4e612b55f96e99b3dae2210"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-7b46a3.apps.d363791c-37c4-4115-b4f0-e1034407046f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T19:09:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"72c095a5-5c2f-48b8-9811-078f27002576","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T19:09:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"72c095a5-5c2f-48b8-9811-078f27002576","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T19:09:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"72c095a5-5c2f-48b8-9811-078f27002576","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-7b46a3/sub-test-model-7b46a3\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T19:09:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"72c095a5-5c2f-48b8-9811-078f27002576","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T19:09:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"72c095a5-5c2f-48b8-9811-078f27002576","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T19:09:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"72c095a5-5c2f-48b8-9811-078f27002576","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T19:09:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"72c095a5-5c2f-48b8-9811-078f27002576","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T19:09:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"72c095a5-5c2f-48b8-9811-078f27002576","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T19:09:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4d15425c-3947-4bf1-8409-4303ffb8688e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.16:59238","PortSpecifier":{"PortValue":59238}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4d15425c-3947-4bf1-8409-4303ffb8688e","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-33ca20.apps.d363791c-37c4-4115-b4f0-e1034407046f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T19:09:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4d15425c-3947-4bf1-8409-4303ffb8688e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.16:59238","PortSpecifier":{"PortValue":59238}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783710578,"nanos":993099605},"http":{"id":"4d15425c-3947-4bf1-8409-4303ffb8688e","method":"POST","headers":{":authority":"e2e-shared-a-33ca20.apps.d363791c-37c4-4115-b4f0-e1034407046f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T19:09:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4d15425c-3947-4bf1-8409-4303ffb8688e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-JT8MbNBQaRvx8BhH_vsOwxYd5Q11TJDm644XA7c6I40ahbpRZSStDvipg6cN"} {"level":"debug","ts":"2026-07-10T19:09:38Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4d15425c-3947-4bf1-8409-4303ffb8688e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-33ca20.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-JT8MbNBQaRvx8BhH_vsOwxYd5Q11TJDm644XA7c6I40ahbpRZSStDvipg6cN\"}"} {"level":"debug","ts":"2026-07-10T19:09:38Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4d15425c-3947-4bf1-8409-4303ffb8688e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-33ca20.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"79e98be2-feb5-4ae4-9f11-e621ef91d872","keyName":"e2e-sub-iso-bc8559","subscription":"e2e-shared-sub-18f873","tenant":"e2e-shared-a-33ca20","userId":"79e98be2-feb5-4ae4-9f11-e621ef91d872","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-10T19:09:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4d15425c-3947-4bf1-8409-4303ffb8688e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T19:09:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4d15425c-3947-4bf1-8409-4303ffb8688e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T19:09:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4d15425c-3947-4bf1-8409-4303ffb8688e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T19:09:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4d15425c-3947-4bf1-8409-4303ffb8688e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-33ca20/sub-test-model-33ca20\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T19:09:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4d15425c-3947-4bf1-8409-4303ffb8688e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T19:09:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4d15425c-3947-4bf1-8409-4303ffb8688e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-18f873"} {"level":"debug","ts":"2026-07-10T19:09:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4d15425c-3947-4bf1-8409-4303ffb8688e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-10T19:09:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4d15425c-3947-4bf1-8409-4303ffb8688e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-10T19:09:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4d15425c-3947-4bf1-8409-4303ffb8688e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T19:09:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4d15425c-3947-4bf1-8409-4303ffb8688e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T19:09:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e4f123a8-4979-485a-86b7-b25f39eae116","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.16:56660","PortSpecifier":{"PortValue":56660}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e4f123a8-4979-485a-86b7-b25f39eae116","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-7b46a3.apps.d363791c-37c4-4115-b4f0-e1034407046f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T19:09:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e4f123a8-4979-485a-86b7-b25f39eae116","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.16:56660","PortSpecifier":{"PortValue":56660}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783710579,"nanos":22570877},"http":{"id":"e4f123a8-4979-485a-86b7-b25f39eae116","method":"POST","headers":{":authority":"e2e-shared-b-7b46a3.apps.d363791c-37c4-4115-b4f0-e1034407046f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T19:09:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e4f123a8-4979-485a-86b7-b25f39eae116","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ixSIlMSHRLLD82Pa_Q0H4yKMiWFU6O6B8aQ9bL95jU1byoJMawGgsU0qHSIL"} {"level":"debug","ts":"2026-07-10T19:09:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e4f123a8-4979-485a-86b7-b25f39eae116","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-7b46a3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ixSIlMSHRLLD82Pa_Q0H4yKMiWFU6O6B8aQ9bL95jU1byoJMawGgsU0qHSIL\"}"} {"level":"debug","ts":"2026-07-10T19:09:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e4f123a8-4979-485a-86b7-b25f39eae116","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-7b46a3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"83eb5185-3d7a-419a-9ff6-353d5d19df0b","keyName":"e2e-sub-iso-c4f225","subscription":"e2e-shared-sub-18f873","tenant":"e2e-shared-b-7b46a3","userId":"83eb5185-3d7a-419a-9ff6-353d5d19df0b","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-10T19:09:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e4f123a8-4979-485a-86b7-b25f39eae116","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T19:09:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e4f123a8-4979-485a-86b7-b25f39eae116","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T19:09:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e4f123a8-4979-485a-86b7-b25f39eae116","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T19:09:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e4f123a8-4979-485a-86b7-b25f39eae116","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-7b46a3/sub-test-model-7b46a3\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T19:09:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e4f123a8-4979-485a-86b7-b25f39eae116","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-10T19:09:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e4f123a8-4979-485a-86b7-b25f39eae116","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-18f873"} {"level":"debug","ts":"2026-07-10T19:09:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e4f123a8-4979-485a-86b7-b25f39eae116","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-10T19:09:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e4f123a8-4979-485a-86b7-b25f39eae116","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-10T19:09:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e4f123a8-4979-485a-86b7-b25f39eae116","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T19:09:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e4f123a8-4979-485a-86b7-b25f39eae116","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T19:09:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9c957ee355a62da6ea46a4d3beb6abe4e08f8ff25da7e7c2e9d4eaf159f12e9f"} {"level":"info","ts":"2026-07-10T19:09:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/300e6ea3b19e6a2db029a3371b8b73cc52054eb1820d9981ee0f4b42d575c3de"} {"level":"info","ts":"2026-07-10T19:09:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c845e0097e502f097409759210db0d3c4946cbe41566cc6e9180dda83cc25ea0"} {"level":"info","ts":"2026-07-10T19:09:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/981d3db066dfde8e42076eba630faaa1c399621ff67a9cd7fb8c0e502f910df1"} {"level":"info","ts":"2026-07-10T19:09:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eaf56c17828d587f7339a43f9896f6233f42805c5d50f03b38ee155aaf7483fe"} {"level":"info","ts":"2026-07-10T19:09:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8b47d8ec689916de70312dcf8bf670bce239e3ca38b57e9408529100fdc9f667"} {"level":"info","ts":"2026-07-10T19:09:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cf6d234abf242f57e80acbb12a65cedec061a11dadcd51ad29a31224237f2e2e"} {"level":"info","ts":"2026-07-10T19:09:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/90714ee245d02f2cd2ac94e94cd4bcf7130f105565bedf65f8257e6d8ec92b92"} {"level":"info","ts":"2026-07-10T19:09:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/141aaf22f2de77ffdee50da40d794a3b0863bac5c7eb7603eae3ebcf00f84e96"} {"level":"info","ts":"2026-07-10T19:09:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7ac5b9e820f4dcaeeecf2cbeaa0942f9d20655987860d4d8e069540730763318"} {"level":"info","ts":"2026-07-10T19:09:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d111f1b904ec71500af0937736dfc86a65df67c92bdff77a7ca400f954d868c4"} {"level":"info","ts":"2026-07-10T19:09:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/32d8275eaf54bd3ccfc41cded099c761b01ee5643f792a0b596235f69ddad2a3"} {"level":"info","ts":"2026-07-10T19:09:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/87166a0df099b90714872bf29d9e7e9ef5bff83567cec591690c34df8f3e2471"} {"level":"info","ts":"2026-07-10T19:09:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/355bb16e15a061f2350bea7a31b1d5869273cb5330d5a5ed20c2f54ece6372e5"} {"level":"info","ts":"2026-07-10T19:09:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/297abd0bbed03231b5142955f55b8b2e7cd95361126e006d32dfd770ad54e04b"} {"level":"info","ts":"2026-07-10T19:09:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3b74401fb0fda16086aa2596af3af21c97b9b74a11b13f3f1a95a859eacbec9f"} {"level":"debug","ts":"2026-07-10T19:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7dab56c8b67edfb4ee11a943a0df0c0a466dd4cfd2dafe594ac6127780a5968","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:10:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:10:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7dab56c8b67edfb4ee11a943a0df0c0a466dd4cfd2dafe594ac6127780a5968","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7dab56c8b67edfb4ee11a943a0df0c0a466dd4cfd2dafe594ac6127780a5968","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7dab56c8b67edfb4ee11a943a0df0c0a466dd4cfd2dafe594ac6127780a5968","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7dab56c8b67edfb4ee11a943a0df0c0a466dd4cfd2dafe594ac6127780a5968"} {"level":"debug","ts":"2026-07-10T19:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7dab56c8b67edfb4ee11a943a0df0c0a466dd4cfd2dafe594ac6127780a5968","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7dab56c8b67edfb4ee11a943a0df0c0a466dd4cfd2dafe594ac6127780a5968"} {"level":"debug","ts":"2026-07-10T19:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7dab56c8b67edfb4ee11a943a0df0c0a466dd4cfd2dafe594ac6127780a5968","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:10:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:10:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d7dab56c8b67edfb4ee11a943a0df0c0a466dd4cfd2dafe594ac6127780a5968"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7dab56c8b67edfb4ee11a943a0df0c0a466dd4cfd2dafe594ac6127780a5968","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7dab56c8b67edfb4ee11a943a0df0c0a466dd4cfd2dafe594ac6127780a5968","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:10:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:10:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7dab56c8b67edfb4ee11a943a0df0c0a466dd4cfd2dafe594ac6127780a5968","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7dab56c8b67edfb4ee11a943a0df0c0a466dd4cfd2dafe594ac6127780a5968","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7dab56c8b67edfb4ee11a943a0df0c0a466dd4cfd2dafe594ac6127780a5968","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7dab56c8b67edfb4ee11a943a0df0c0a466dd4cfd2dafe594ac6127780a5968"} {"level":"debug","ts":"2026-07-10T19:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7dab56c8b67edfb4ee11a943a0df0c0a466dd4cfd2dafe594ac6127780a5968","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7dab56c8b67edfb4ee11a943a0df0c0a466dd4cfd2dafe594ac6127780a5968"} {"level":"debug","ts":"2026-07-10T19:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7dab56c8b67edfb4ee11a943a0df0c0a466dd4cfd2dafe594ac6127780a5968","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:10:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:10:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d7dab56c8b67edfb4ee11a943a0df0c0a466dd4cfd2dafe594ac6127780a5968"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7dab56c8b67edfb4ee11a943a0df0c0a466dd4cfd2dafe594ac6127780a5968","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7dab56c8b67edfb4ee11a943a0df0c0a466dd4cfd2dafe594ac6127780a5968","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:10:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:10:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7dab56c8b67edfb4ee11a943a0df0c0a466dd4cfd2dafe594ac6127780a5968","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7dab56c8b67edfb4ee11a943a0df0c0a466dd4cfd2dafe594ac6127780a5968","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7dab56c8b67edfb4ee11a943a0df0c0a466dd4cfd2dafe594ac6127780a5968","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7dab56c8b67edfb4ee11a943a0df0c0a466dd4cfd2dafe594ac6127780a5968"} {"level":"debug","ts":"2026-07-10T19:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7dab56c8b67edfb4ee11a943a0df0c0a466dd4cfd2dafe594ac6127780a5968","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7dab56c8b67edfb4ee11a943a0df0c0a466dd4cfd2dafe594ac6127780a5968"} {"level":"debug","ts":"2026-07-10T19:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7dab56c8b67edfb4ee11a943a0df0c0a466dd4cfd2dafe594ac6127780a5968","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:10:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:10:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d7dab56c8b67edfb4ee11a943a0df0c0a466dd4cfd2dafe594ac6127780a5968"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7dab56c8b67edfb4ee11a943a0df0c0a466dd4cfd2dafe594ac6127780a5968","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7dab56c8b67edfb4ee11a943a0df0c0a466dd4cfd2dafe594ac6127780a5968","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:10:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:10:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7dab56c8b67edfb4ee11a943a0df0c0a466dd4cfd2dafe594ac6127780a5968","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7dab56c8b67edfb4ee11a943a0df0c0a466dd4cfd2dafe594ac6127780a5968","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7dab56c8b67edfb4ee11a943a0df0c0a466dd4cfd2dafe594ac6127780a5968","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7dab56c8b67edfb4ee11a943a0df0c0a466dd4cfd2dafe594ac6127780a5968"} {"level":"debug","ts":"2026-07-10T19:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7dab56c8b67edfb4ee11a943a0df0c0a466dd4cfd2dafe594ac6127780a5968","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7dab56c8b67edfb4ee11a943a0df0c0a466dd4cfd2dafe594ac6127780a5968"} {"level":"debug","ts":"2026-07-10T19:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7dab56c8b67edfb4ee11a943a0df0c0a466dd4cfd2dafe594ac6127780a5968","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:10:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:10:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d7dab56c8b67edfb4ee11a943a0df0c0a466dd4cfd2dafe594ac6127780a5968"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7dab56c8b67edfb4ee11a943a0df0c0a466dd4cfd2dafe594ac6127780a5968","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7dab56c8b67edfb4ee11a943a0df0c0a466dd4cfd2dafe594ac6127780a5968","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:10:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:10:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7dab56c8b67edfb4ee11a943a0df0c0a466dd4cfd2dafe594ac6127780a5968","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7dab56c8b67edfb4ee11a943a0df0c0a466dd4cfd2dafe594ac6127780a5968","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7dab56c8b67edfb4ee11a943a0df0c0a466dd4cfd2dafe594ac6127780a5968","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7dab56c8b67edfb4ee11a943a0df0c0a466dd4cfd2dafe594ac6127780a5968"} {"level":"debug","ts":"2026-07-10T19:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7dab56c8b67edfb4ee11a943a0df0c0a466dd4cfd2dafe594ac6127780a5968","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7dab56c8b67edfb4ee11a943a0df0c0a466dd4cfd2dafe594ac6127780a5968"} {"level":"debug","ts":"2026-07-10T19:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7dab56c8b67edfb4ee11a943a0df0c0a466dd4cfd2dafe594ac6127780a5968","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:10:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:10:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d7dab56c8b67edfb4ee11a943a0df0c0a466dd4cfd2dafe594ac6127780a5968"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7dab56c8b67edfb4ee11a943a0df0c0a466dd4cfd2dafe594ac6127780a5968","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7dab56c8b67edfb4ee11a943a0df0c0a466dd4cfd2dafe594ac6127780a5968","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:10:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:10:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7dab56c8b67edfb4ee11a943a0df0c0a466dd4cfd2dafe594ac6127780a5968","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7dab56c8b67edfb4ee11a943a0df0c0a466dd4cfd2dafe594ac6127780a5968","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7dab56c8b67edfb4ee11a943a0df0c0a466dd4cfd2dafe594ac6127780a5968","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f465663dc4b6fda45345797d2e2a55840bfcab883d7330847dd33730c74a78a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:10:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:10:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7dab56c8b67edfb4ee11a943a0df0c0a466dd4cfd2dafe594ac6127780a5968"} {"level":"info","ts":"2026-07-10T19:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f465663dc4b6fda45345797d2e2a55840bfcab883d7330847dd33730c74a78a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f465663dc4b6fda45345797d2e2a55840bfcab883d7330847dd33730c74a78a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:10:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:10:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f465663dc4b6fda45345797d2e2a55840bfcab883d7330847dd33730c74a78a4"} {"level":"info","ts":"2026-07-10T19:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f465663dc4b6fda45345797d2e2a55840bfcab883d7330847dd33730c74a78a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7dab56c8b67edfb4ee11a943a0df0c0a466dd4cfd2dafe594ac6127780a5968","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f465663dc4b6fda45345797d2e2a55840bfcab883d7330847dd33730c74a78a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:10:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:10:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f465663dc4b6fda45345797d2e2a55840bfcab883d7330847dd33730c74a78a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-10T19:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f465663dc4b6fda45345797d2e2a55840bfcab883d7330847dd33730c74a78a4","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f465663dc4b6fda45345797d2e2a55840bfcab883d7330847dd33730c74a78a4\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-10T19:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f465663dc4b6fda45345797d2e2a55840bfcab883d7330847dd33730c74a78a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:10:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:10:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f465663dc4b6fda45345797d2e2a55840bfcab883d7330847dd33730c74a78a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7dab56c8b67edfb4ee11a943a0df0c0a466dd4cfd2dafe594ac6127780a5968"} {"level":"info","ts":"2026-07-10T19:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f465663dc4b6fda45345797d2e2a55840bfcab883d7330847dd33730c74a78a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f465663dc4b6fda45345797d2e2a55840bfcab883d7330847dd33730c74a78a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f465663dc4b6fda45345797d2e2a55840bfcab883d7330847dd33730c74a78a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:10:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:10:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f465663dc4b6fda45345797d2e2a55840bfcab883d7330847dd33730c74a78a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f465663dc4b6fda45345797d2e2a55840bfcab883d7330847dd33730c74a78a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:10:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:10:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f465663dc4b6fda45345797d2e2a55840bfcab883d7330847dd33730c74a78a4"} {"level":"error","ts":"2026-07-10T19:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f465663dc4b6fda45345797d2e2a55840bfcab883d7330847dd33730c74a78a4","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f465663dc4b6fda45345797d2e2a55840bfcab883d7330847dd33730c74a78a4\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-10T19:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7dab56c8b67edfb4ee11a943a0df0c0a466dd4cfd2dafe594ac6127780a5968","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:10:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:10:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d7dab56c8b67edfb4ee11a943a0df0c0a466dd4cfd2dafe594ac6127780a5968"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7dab56c8b67edfb4ee11a943a0df0c0a466dd4cfd2dafe594ac6127780a5968","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f465663dc4b6fda45345797d2e2a55840bfcab883d7330847dd33730c74a78a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7dab56c8b67edfb4ee11a943a0df0c0a466dd4cfd2dafe594ac6127780a5968","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f465663dc4b6fda45345797d2e2a55840bfcab883d7330847dd33730c74a78a4"} {"level":"debug","ts":"2026-07-10T19:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46264fcc3a582f4da0ee410ae463acae3b5a7d237d341d06aff9842310a2f27b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:10:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:10:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7dab56c8b67edfb4ee11a943a0df0c0a466dd4cfd2dafe594ac6127780a5968"} {"level":"info","ts":"2026-07-10T19:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46264fcc3a582f4da0ee410ae463acae3b5a7d237d341d06aff9842310a2f27b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f465663dc4b6fda45345797d2e2a55840bfcab883d7330847dd33730c74a78a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:10:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:10:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f465663dc4b6fda45345797d2e2a55840bfcab883d7330847dd33730c74a78a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46264fcc3a582f4da0ee410ae463acae3b5a7d237d341d06aff9842310a2f27b"} {"level":"info","ts":"2026-07-10T19:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f465663dc4b6fda45345797d2e2a55840bfcab883d7330847dd33730c74a78a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46264fcc3a582f4da0ee410ae463acae3b5a7d237d341d06aff9842310a2f27b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:10:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:10:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46264fcc3a582f4da0ee410ae463acae3b5a7d237d341d06aff9842310a2f27b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f465663dc4b6fda45345797d2e2a55840bfcab883d7330847dd33730c74a78a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46264fcc3a582f4da0ee410ae463acae3b5a7d237d341d06aff9842310a2f27b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46264fcc3a582f4da0ee410ae463acae3b5a7d237d341d06aff9842310a2f27b"} {"level":"debug","ts":"2026-07-10T19:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46264fcc3a582f4da0ee410ae463acae3b5a7d237d341d06aff9842310a2f27b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:10:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:10:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["46264fcc3a582f4da0ee410ae463acae3b5a7d237d341d06aff9842310a2f27b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46264fcc3a582f4da0ee410ae463acae3b5a7d237d341d06aff9842310a2f27b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46264fcc3a582f4da0ee410ae463acae3b5a7d237d341d06aff9842310a2f27b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f465663dc4b6fda45345797d2e2a55840bfcab883d7330847dd33730c74a78a4"} {"level":"info","ts":"2026-07-10T19:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46264fcc3a582f4da0ee410ae463acae3b5a7d237d341d06aff9842310a2f27b"} {"level":"debug","ts":"2026-07-10T19:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a3c5313f1f2921b164df59a0db68e3323d7059fc1916e8c7ba36fc082ae8dbcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:10:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:10:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a3c5313f1f2921b164df59a0db68e3323d7059fc1916e8c7ba36fc082ae8dbcc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a3c5313f1f2921b164df59a0db68e3323d7059fc1916e8c7ba36fc082ae8dbcc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a3c5313f1f2921b164df59a0db68e3323d7059fc1916e8c7ba36fc082ae8dbcc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3c5313f1f2921b164df59a0db68e3323d7059fc1916e8c7ba36fc082ae8dbcc"} {"level":"debug","ts":"2026-07-10T19:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a3c5313f1f2921b164df59a0db68e3323d7059fc1916e8c7ba36fc082ae8dbcc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3c5313f1f2921b164df59a0db68e3323d7059fc1916e8c7ba36fc082ae8dbcc"} {"level":"debug","ts":"2026-07-10T19:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a3c5313f1f2921b164df59a0db68e3323d7059fc1916e8c7ba36fc082ae8dbcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:10:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:10:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a3c5313f1f2921b164df59a0db68e3323d7059fc1916e8c7ba36fc082ae8dbcc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a3c5313f1f2921b164df59a0db68e3323d7059fc1916e8c7ba36fc082ae8dbcc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a3c5313f1f2921b164df59a0db68e3323d7059fc1916e8c7ba36fc082ae8dbcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:10:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:10:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a3c5313f1f2921b164df59a0db68e3323d7059fc1916e8c7ba36fc082ae8dbcc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a3c5313f1f2921b164df59a0db68e3323d7059fc1916e8c7ba36fc082ae8dbcc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a3c5313f1f2921b164df59a0db68e3323d7059fc1916e8c7ba36fc082ae8dbcc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3c5313f1f2921b164df59a0db68e3323d7059fc1916e8c7ba36fc082ae8dbcc"} {"level":"debug","ts":"2026-07-10T19:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a3c5313f1f2921b164df59a0db68e3323d7059fc1916e8c7ba36fc082ae8dbcc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3c5313f1f2921b164df59a0db68e3323d7059fc1916e8c7ba36fc082ae8dbcc"} {"level":"debug","ts":"2026-07-10T19:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a3c5313f1f2921b164df59a0db68e3323d7059fc1916e8c7ba36fc082ae8dbcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:10:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:10:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a3c5313f1f2921b164df59a0db68e3323d7059fc1916e8c7ba36fc082ae8dbcc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a3c5313f1f2921b164df59a0db68e3323d7059fc1916e8c7ba36fc082ae8dbcc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a3c5313f1f2921b164df59a0db68e3323d7059fc1916e8c7ba36fc082ae8dbcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:10:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:10:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a3c5313f1f2921b164df59a0db68e3323d7059fc1916e8c7ba36fc082ae8dbcc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a76f1e5a6b6f8996a1a78221fc605784438fe1d51850e8e713f3c457149ff52d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:10:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:10:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3c5313f1f2921b164df59a0db68e3323d7059fc1916e8c7ba36fc082ae8dbcc"} {"level":"info","ts":"2026-07-10T19:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a76f1e5a6b6f8996a1a78221fc605784438fe1d51850e8e713f3c457149ff52d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a3c5313f1f2921b164df59a0db68e3323d7059fc1916e8c7ba36fc082ae8dbcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:10:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:10:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a3c5313f1f2921b164df59a0db68e3323d7059fc1916e8c7ba36fc082ae8dbcc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a3c5313f1f2921b164df59a0db68e3323d7059fc1916e8c7ba36fc082ae8dbcc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dec1d67e33a7404112d76b421ddb160f51b7f51687037bb2eec5063d3dccfd70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:10:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:10:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a76f1e5a6b6f8996a1a78221fc605784438fe1d51850e8e713f3c457149ff52d"} {"level":"info","ts":"2026-07-10T19:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dec1d67e33a7404112d76b421ddb160f51b7f51687037bb2eec5063d3dccfd70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a76f1e5a6b6f8996a1a78221fc605784438fe1d51850e8e713f3c457149ff52d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:10:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:10:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a76f1e5a6b6f8996a1a78221fc605784438fe1d51850e8e713f3c457149ff52d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3c5313f1f2921b164df59a0db68e3323d7059fc1916e8c7ba36fc082ae8dbcc"} {"level":"info","ts":"2026-07-10T19:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a76f1e5a6b6f8996a1a78221fc605784438fe1d51850e8e713f3c457149ff52d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a3c5313f1f2921b164df59a0db68e3323d7059fc1916e8c7ba36fc082ae8dbcc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dec1d67e33a7404112d76b421ddb160f51b7f51687037bb2eec5063d3dccfd70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:10:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:10:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dec1d67e33a7404112d76b421ddb160f51b7f51687037bb2eec5063d3dccfd70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a76f1e5a6b6f8996a1a78221fc605784438fe1d51850e8e713f3c457149ff52d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dec1d67e33a7404112d76b421ddb160f51b7f51687037bb2eec5063d3dccfd70","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dec1d67e33a7404112d76b421ddb160f51b7f51687037bb2eec5063d3dccfd70"} {"level":"debug","ts":"2026-07-10T19:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dec1d67e33a7404112d76b421ddb160f51b7f51687037bb2eec5063d3dccfd70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:10:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:10:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dec1d67e33a7404112d76b421ddb160f51b7f51687037bb2eec5063d3dccfd70"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dec1d67e33a7404112d76b421ddb160f51b7f51687037bb2eec5063d3dccfd70","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a76f1e5a6b6f8996a1a78221fc605784438fe1d51850e8e713f3c457149ff52d"} {"level":"debug","ts":"2026-07-10T19:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dec1d67e33a7404112d76b421ddb160f51b7f51687037bb2eec5063d3dccfd70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70ceca67ac86490f2eeede597aca67150da2adb513301b9f53d40dcc1276de47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:10:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:10:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3c5313f1f2921b164df59a0db68e3323d7059fc1916e8c7ba36fc082ae8dbcc"} {"level":"info","ts":"2026-07-10T19:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70ceca67ac86490f2eeede597aca67150da2adb513301b9f53d40dcc1276de47","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70ceca67ac86490f2eeede597aca67150da2adb513301b9f53d40dcc1276de47","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70ceca67ac86490f2eeede597aca67150da2adb513301b9f53d40dcc1276de47","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dec1d67e33a7404112d76b421ddb160f51b7f51687037bb2eec5063d3dccfd70"} {"level":"debug","ts":"2026-07-10T19:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70ceca67ac86490f2eeede597aca67150da2adb513301b9f53d40dcc1276de47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:10:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:10:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70ceca67ac86490f2eeede597aca67150da2adb513301b9f53d40dcc1276de47","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70ceca67ac86490f2eeede597aca67150da2adb513301b9f53d40dcc1276de47","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70ceca67ac86490f2eeede597aca67150da2adb513301b9f53d40dcc1276de47"} {"level":"debug","ts":"2026-07-10T19:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d4190739a24e27a042ad3cbbb6590ff77c32fe76e24ce647e00f8d625d892fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:10:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:10:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d4190739a24e27a042ad3cbbb6590ff77c32fe76e24ce647e00f8d625d892fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70ceca67ac86490f2eeede597aca67150da2adb513301b9f53d40dcc1276de47","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d4190739a24e27a042ad3cbbb6590ff77c32fe76e24ce647e00f8d625d892fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d4190739a24e27a042ad3cbbb6590ff77c32fe76e24ce647e00f8d625d892fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d4190739a24e27a042ad3cbbb6590ff77c32fe76e24ce647e00f8d625d892fd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70ceca67ac86490f2eeede597aca67150da2adb513301b9f53d40dcc1276de47"} {"level":"info","ts":"2026-07-10T19:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d4190739a24e27a042ad3cbbb6590ff77c32fe76e24ce647e00f8d625d892fd"} {"level":"debug","ts":"2026-07-10T19:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d4190739a24e27a042ad3cbbb6590ff77c32fe76e24ce647e00f8d625d892fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:10:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:10:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9d4190739a24e27a042ad3cbbb6590ff77c32fe76e24ce647e00f8d625d892fd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d4190739a24e27a042ad3cbbb6590ff77c32fe76e24ce647e00f8d625d892fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d4190739a24e27a042ad3cbbb6590ff77c32fe76e24ce647e00f8d625d892fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:10:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:10:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d4190739a24e27a042ad3cbbb6590ff77c32fe76e24ce647e00f8d625d892fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d4190739a24e27a042ad3cbbb6590ff77c32fe76e24ce647e00f8d625d892fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d4190739a24e27a042ad3cbbb6590ff77c32fe76e24ce647e00f8d625d892fd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d4190739a24e27a042ad3cbbb6590ff77c32fe76e24ce647e00f8d625d892fd"} {"level":"debug","ts":"2026-07-10T19:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d4190739a24e27a042ad3cbbb6590ff77c32fe76e24ce647e00f8d625d892fd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d4190739a24e27a042ad3cbbb6590ff77c32fe76e24ce647e00f8d625d892fd"} {"level":"debug","ts":"2026-07-10T19:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d4190739a24e27a042ad3cbbb6590ff77c32fe76e24ce647e00f8d625d892fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:10:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:10:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9d4190739a24e27a042ad3cbbb6590ff77c32fe76e24ce647e00f8d625d892fd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d4190739a24e27a042ad3cbbb6590ff77c32fe76e24ce647e00f8d625d892fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70ceca67ac86490f2eeede597aca67150da2adb513301b9f53d40dcc1276de47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:10:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:10:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["70ceca67ac86490f2eeede597aca67150da2adb513301b9f53d40dcc1276de47"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70ceca67ac86490f2eeede597aca67150da2adb513301b9f53d40dcc1276de47","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d4190739a24e27a042ad3cbbb6590ff77c32fe76e24ce647e00f8d625d892fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:10:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:10:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d4190739a24e27a042ad3cbbb6590ff77c32fe76e24ce647e00f8d625d892fd"} {"level":"info","ts":"2026-07-10T19:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d4190739a24e27a042ad3cbbb6590ff77c32fe76e24ce647e00f8d625d892fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70ceca67ac86490f2eeede597aca67150da2adb513301b9f53d40dcc1276de47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:10:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:10:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70ceca67ac86490f2eeede597aca67150da2adb513301b9f53d40dcc1276de47","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d4190739a24e27a042ad3cbbb6590ff77c32fe76e24ce647e00f8d625d892fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:10:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:10:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9d4190739a24e27a042ad3cbbb6590ff77c32fe76e24ce647e00f8d625d892fd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70ceca67ac86490f2eeede597aca67150da2adb513301b9f53d40dcc1276de47"} {"level":"info","ts":"2026-07-10T19:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d4190739a24e27a042ad3cbbb6590ff77c32fe76e24ce647e00f8d625d892fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70ceca67ac86490f2eeede597aca67150da2adb513301b9f53d40dcc1276de47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:10:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:10:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["70ceca67ac86490f2eeede597aca67150da2adb513301b9f53d40dcc1276de47"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70ceca67ac86490f2eeede597aca67150da2adb513301b9f53d40dcc1276de47","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d4190739a24e27a042ad3cbbb6590ff77c32fe76e24ce647e00f8d625d892fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:10:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:10:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d4190739a24e27a042ad3cbbb6590ff77c32fe76e24ce647e00f8d625d892fd"} {"level":"info","ts":"2026-07-10T19:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d4190739a24e27a042ad3cbbb6590ff77c32fe76e24ce647e00f8d625d892fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70ceca67ac86490f2eeede597aca67150da2adb513301b9f53d40dcc1276de47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:10:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:10:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70ceca67ac86490f2eeede597aca67150da2adb513301b9f53d40dcc1276de47"} {"level":"info","ts":"2026-07-10T19:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70ceca67ac86490f2eeede597aca67150da2adb513301b9f53d40dcc1276de47","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d4190739a24e27a042ad3cbbb6590ff77c32fe76e24ce647e00f8d625d892fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70ceca67ac86490f2eeede597aca67150da2adb513301b9f53d40dcc1276de47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:10:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:10:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["70ceca67ac86490f2eeede597aca67150da2adb513301b9f53d40dcc1276de47"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70ceca67ac86490f2eeede597aca67150da2adb513301b9f53d40dcc1276de47","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d4190739a24e27a042ad3cbbb6590ff77c32fe76e24ce647e00f8d625d892fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70ceca67ac86490f2eeede597aca67150da2adb513301b9f53d40dcc1276de47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:10:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:10:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["70ceca67ac86490f2eeede597aca67150da2adb513301b9f53d40dcc1276de47"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-10T19:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"70ceca67ac86490f2eeede597aca67150da2adb513301b9f53d40dcc1276de47","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"70ceca67ac86490f2eeede597aca67150da2adb513301b9f53d40dcc1276de47\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-10T19:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70ceca67ac86490f2eeede597aca67150da2adb513301b9f53d40dcc1276de47","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d4190739a24e27a042ad3cbbb6590ff77c32fe76e24ce647e00f8d625d892fd"} {"level":"debug","ts":"2026-07-10T19:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70ceca67ac86490f2eeede597aca67150da2adb513301b9f53d40dcc1276de47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:10:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:10:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70ceca67ac86490f2eeede597aca67150da2adb513301b9f53d40dcc1276de47","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d4190739a24e27a042ad3cbbb6590ff77c32fe76e24ce647e00f8d625d892fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:10:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:10:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9d4190739a24e27a042ad3cbbb6590ff77c32fe76e24ce647e00f8d625d892fd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70ceca67ac86490f2eeede597aca67150da2adb513301b9f53d40dcc1276de47"} {"level":"info","ts":"2026-07-10T19:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d4190739a24e27a042ad3cbbb6590ff77c32fe76e24ce647e00f8d625d892fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70ceca67ac86490f2eeede597aca67150da2adb513301b9f53d40dcc1276de47","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d4190739a24e27a042ad3cbbb6590ff77c32fe76e24ce647e00f8d625d892fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70ceca67ac86490f2eeede597aca67150da2adb513301b9f53d40dcc1276de47","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70ceca67ac86490f2eeede597aca67150da2adb513301b9f53d40dcc1276de47"} {"level":"debug","ts":"2026-07-10T19:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70ceca67ac86490f2eeede597aca67150da2adb513301b9f53d40dcc1276de47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:10:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:10:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["70ceca67ac86490f2eeede597aca67150da2adb513301b9f53d40dcc1276de47"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d4190739a24e27a042ad3cbbb6590ff77c32fe76e24ce647e00f8d625d892fd"} {"level":"info","ts":"2026-07-10T19:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70ceca67ac86490f2eeede597aca67150da2adb513301b9f53d40dcc1276de47","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70ceca67ac86490f2eeede597aca67150da2adb513301b9f53d40dcc1276de47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:10:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:10:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70ceca67ac86490f2eeede597aca67150da2adb513301b9f53d40dcc1276de47","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70ceca67ac86490f2eeede597aca67150da2adb513301b9f53d40dcc1276de47","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70ceca67ac86490f2eeede597aca67150da2adb513301b9f53d40dcc1276de47","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70ceca67ac86490f2eeede597aca67150da2adb513301b9f53d40dcc1276de47"} {"level":"debug","ts":"2026-07-10T19:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70ceca67ac86490f2eeede597aca67150da2adb513301b9f53d40dcc1276de47","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70ceca67ac86490f2eeede597aca67150da2adb513301b9f53d40dcc1276de47"} {"level":"debug","ts":"2026-07-10T19:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70ceca67ac86490f2eeede597aca67150da2adb513301b9f53d40dcc1276de47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:10:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:10:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["70ceca67ac86490f2eeede597aca67150da2adb513301b9f53d40dcc1276de47"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70ceca67ac86490f2eeede597aca67150da2adb513301b9f53d40dcc1276de47","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70ceca67ac86490f2eeede597aca67150da2adb513301b9f53d40dcc1276de47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:10:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:10:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70ceca67ac86490f2eeede597aca67150da2adb513301b9f53d40dcc1276de47","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70ceca67ac86490f2eeede597aca67150da2adb513301b9f53d40dcc1276de47","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70ceca67ac86490f2eeede597aca67150da2adb513301b9f53d40dcc1276de47","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70ceca67ac86490f2eeede597aca67150da2adb513301b9f53d40dcc1276de47"} {"level":"debug","ts":"2026-07-10T19:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70ceca67ac86490f2eeede597aca67150da2adb513301b9f53d40dcc1276de47","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70ceca67ac86490f2eeede597aca67150da2adb513301b9f53d40dcc1276de47"} {"level":"debug","ts":"2026-07-10T19:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70ceca67ac86490f2eeede597aca67150da2adb513301b9f53d40dcc1276de47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:10:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:10:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["70ceca67ac86490f2eeede597aca67150da2adb513301b9f53d40dcc1276de47"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70ceca67ac86490f2eeede597aca67150da2adb513301b9f53d40dcc1276de47","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70ceca67ac86490f2eeede597aca67150da2adb513301b9f53d40dcc1276de47","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70ceca67ac86490f2eeede597aca67150da2adb513301b9f53d40dcc1276de47"} {"level":"debug","ts":"2026-07-10T19:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e519c81932687124c79c40aa5d23a5c4ac24c2fca8a62ffbd79239cd7d27731","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:10:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:10:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e519c81932687124c79c40aa5d23a5c4ac24c2fca8a62ffbd79239cd7d27731","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e519c81932687124c79c40aa5d23a5c4ac24c2fca8a62ffbd79239cd7d27731","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e519c81932687124c79c40aa5d23a5c4ac24c2fca8a62ffbd79239cd7d27731","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e519c81932687124c79c40aa5d23a5c4ac24c2fca8a62ffbd79239cd7d27731"} {"level":"debug","ts":"2026-07-10T19:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e519c81932687124c79c40aa5d23a5c4ac24c2fca8a62ffbd79239cd7d27731","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e519c81932687124c79c40aa5d23a5c4ac24c2fca8a62ffbd79239cd7d27731"} {"level":"debug","ts":"2026-07-10T19:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e519c81932687124c79c40aa5d23a5c4ac24c2fca8a62ffbd79239cd7d27731","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:10:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:10:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e519c81932687124c79c40aa5d23a5c4ac24c2fca8a62ffbd79239cd7d27731"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e519c81932687124c79c40aa5d23a5c4ac24c2fca8a62ffbd79239cd7d27731","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e519c81932687124c79c40aa5d23a5c4ac24c2fca8a62ffbd79239cd7d27731","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:10:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:10:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e519c81932687124c79c40aa5d23a5c4ac24c2fca8a62ffbd79239cd7d27731","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e519c81932687124c79c40aa5d23a5c4ac24c2fca8a62ffbd79239cd7d27731","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e519c81932687124c79c40aa5d23a5c4ac24c2fca8a62ffbd79239cd7d27731","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e519c81932687124c79c40aa5d23a5c4ac24c2fca8a62ffbd79239cd7d27731"} {"level":"debug","ts":"2026-07-10T19:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e519c81932687124c79c40aa5d23a5c4ac24c2fca8a62ffbd79239cd7d27731","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e519c81932687124c79c40aa5d23a5c4ac24c2fca8a62ffbd79239cd7d27731"} {"level":"debug","ts":"2026-07-10T19:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e519c81932687124c79c40aa5d23a5c4ac24c2fca8a62ffbd79239cd7d27731","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:10:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:10:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e519c81932687124c79c40aa5d23a5c4ac24c2fca8a62ffbd79239cd7d27731"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e519c81932687124c79c40aa5d23a5c4ac24c2fca8a62ffbd79239cd7d27731","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e519c81932687124c79c40aa5d23a5c4ac24c2fca8a62ffbd79239cd7d27731","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e519c81932687124c79c40aa5d23a5c4ac24c2fca8a62ffbd79239cd7d27731"} {"level":"debug","ts":"2026-07-10T19:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d6ed36849896a7f248ac92340bdc53cfcdb1cb72a30e1faa8912dd5ef2bd414","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:10:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:10:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d6ed36849896a7f248ac92340bdc53cfcdb1cb72a30e1faa8912dd5ef2bd414","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d6ed36849896a7f248ac92340bdc53cfcdb1cb72a30e1faa8912dd5ef2bd414","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d6ed36849896a7f248ac92340bdc53cfcdb1cb72a30e1faa8912dd5ef2bd414","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d6ed36849896a7f248ac92340bdc53cfcdb1cb72a30e1faa8912dd5ef2bd414"} {"level":"debug","ts":"2026-07-10T19:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d6ed36849896a7f248ac92340bdc53cfcdb1cb72a30e1faa8912dd5ef2bd414","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d6ed36849896a7f248ac92340bdc53cfcdb1cb72a30e1faa8912dd5ef2bd414"} {"level":"debug","ts":"2026-07-10T19:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d6ed36849896a7f248ac92340bdc53cfcdb1cb72a30e1faa8912dd5ef2bd414","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:10:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:10:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7d6ed36849896a7f248ac92340bdc53cfcdb1cb72a30e1faa8912dd5ef2bd414"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d6ed36849896a7f248ac92340bdc53cfcdb1cb72a30e1faa8912dd5ef2bd414","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d6ed36849896a7f248ac92340bdc53cfcdb1cb72a30e1faa8912dd5ef2bd414","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:10:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:10:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d6ed36849896a7f248ac92340bdc53cfcdb1cb72a30e1faa8912dd5ef2bd414","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfd941dbe8baef1eb9c088d6b45888b5cb6f5211b352a86fe0856dec10522550","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:10:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:10:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d6ed36849896a7f248ac92340bdc53cfcdb1cb72a30e1faa8912dd5ef2bd414"} {"level":"info","ts":"2026-07-10T19:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfd941dbe8baef1eb9c088d6b45888b5cb6f5211b352a86fe0856dec10522550","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d6ed36849896a7f248ac92340bdc53cfcdb1cb72a30e1faa8912dd5ef2bd414","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:10:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:10:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7d6ed36849896a7f248ac92340bdc53cfcdb1cb72a30e1faa8912dd5ef2bd414"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d6ed36849896a7f248ac92340bdc53cfcdb1cb72a30e1faa8912dd5ef2bd414","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfd941dbe8baef1eb9c088d6b45888b5cb6f5211b352a86fe0856dec10522550","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:10:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:10:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfd941dbe8baef1eb9c088d6b45888b5cb6f5211b352a86fe0856dec10522550"} {"level":"info","ts":"2026-07-10T19:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfd941dbe8baef1eb9c088d6b45888b5cb6f5211b352a86fe0856dec10522550","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d6ed36849896a7f248ac92340bdc53cfcdb1cb72a30e1faa8912dd5ef2bd414","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:10:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:10:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d6ed36849896a7f248ac92340bdc53cfcdb1cb72a30e1faa8912dd5ef2bd414"} {"level":"info","ts":"2026-07-10T19:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d6ed36849896a7f248ac92340bdc53cfcdb1cb72a30e1faa8912dd5ef2bd414","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfd941dbe8baef1eb9c088d6b45888b5cb6f5211b352a86fe0856dec10522550","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d6ed36849896a7f248ac92340bdc53cfcdb1cb72a30e1faa8912dd5ef2bd414","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:10:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:10:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7d6ed36849896a7f248ac92340bdc53cfcdb1cb72a30e1faa8912dd5ef2bd414"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d6ed36849896a7f248ac92340bdc53cfcdb1cb72a30e1faa8912dd5ef2bd414","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d6ed36849896a7f248ac92340bdc53cfcdb1cb72a30e1faa8912dd5ef2bd414","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:10:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:10:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7d6ed36849896a7f248ac92340bdc53cfcdb1cb72a30e1faa8912dd5ef2bd414"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfd941dbe8baef1eb9c088d6b45888b5cb6f5211b352a86fe0856dec10522550"} {"level":"error","ts":"2026-07-10T19:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7d6ed36849896a7f248ac92340bdc53cfcdb1cb72a30e1faa8912dd5ef2bd414","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7d6ed36849896a7f248ac92340bdc53cfcdb1cb72a30e1faa8912dd5ef2bd414\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-10T19:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfd941dbe8baef1eb9c088d6b45888b5cb6f5211b352a86fe0856dec10522550","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:10:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:10:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bfd941dbe8baef1eb9c088d6b45888b5cb6f5211b352a86fe0856dec10522550"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfd941dbe8baef1eb9c088d6b45888b5cb6f5211b352a86fe0856dec10522550","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d6ed36849896a7f248ac92340bdc53cfcdb1cb72a30e1faa8912dd5ef2bd414","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:10:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:10:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d6ed36849896a7f248ac92340bdc53cfcdb1cb72a30e1faa8912dd5ef2bd414"} {"level":"info","ts":"2026-07-10T19:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d6ed36849896a7f248ac92340bdc53cfcdb1cb72a30e1faa8912dd5ef2bd414","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0298d6954ca4fe78ea370e49effffb5e965309c80dd8061a91bd26753e06fc10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:10:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:10:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0298d6954ca4fe78ea370e49effffb5e965309c80dd8061a91bd26753e06fc10"} {"level":"info","ts":"2026-07-10T19:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0298d6954ca4fe78ea370e49effffb5e965309c80dd8061a91bd26753e06fc10","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfd941dbe8baef1eb9c088d6b45888b5cb6f5211b352a86fe0856dec10522550","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4595aff0d2db467174b2ca7a1409608fa67389278dcd87a00aa9ed178579532","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:10:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:10:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4595aff0d2db467174b2ca7a1409608fa67389278dcd87a00aa9ed178579532","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d6ed36849896a7f248ac92340bdc53cfcdb1cb72a30e1faa8912dd5ef2bd414","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0298d6954ca4fe78ea370e49effffb5e965309c80dd8061a91bd26753e06fc10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:10:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:10:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0298d6954ca4fe78ea370e49effffb5e965309c80dd8061a91bd26753e06fc10"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d6ed36849896a7f248ac92340bdc53cfcdb1cb72a30e1faa8912dd5ef2bd414"} {"level":"info","ts":"2026-07-10T19:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0298d6954ca4fe78ea370e49effffb5e965309c80dd8061a91bd26753e06fc10","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4595aff0d2db467174b2ca7a1409608fa67389278dcd87a00aa9ed178579532","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0298d6954ca4fe78ea370e49effffb5e965309c80dd8061a91bd26753e06fc10","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d6ed36849896a7f248ac92340bdc53cfcdb1cb72a30e1faa8912dd5ef2bd414","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:10:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:10:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7d6ed36849896a7f248ac92340bdc53cfcdb1cb72a30e1faa8912dd5ef2bd414"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfd941dbe8baef1eb9c088d6b45888b5cb6f5211b352a86fe0856dec10522550"} {"level":"info","ts":"2026-07-10T19:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d6ed36849896a7f248ac92340bdc53cfcdb1cb72a30e1faa8912dd5ef2bd414","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4595aff0d2db467174b2ca7a1409608fa67389278dcd87a00aa9ed178579532","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:10:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:10:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4595aff0d2db467174b2ca7a1409608fa67389278dcd87a00aa9ed178579532"} {"level":"info","ts":"2026-07-10T19:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4595aff0d2db467174b2ca7a1409608fa67389278dcd87a00aa9ed178579532","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d6ed36849896a7f248ac92340bdc53cfcdb1cb72a30e1faa8912dd5ef2bd414","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d629d8513fecbbd26b8943dbfa5a2c669177bf3896794f1a5ecf18abd87bb5a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:10:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:10:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d629d8513fecbbd26b8943dbfa5a2c669177bf3896794f1a5ecf18abd87bb5a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4595aff0d2db467174b2ca7a1409608fa67389278dcd87a00aa9ed178579532","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:10:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:10:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a4595aff0d2db467174b2ca7a1409608fa67389278dcd87a00aa9ed178579532"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0298d6954ca4fe78ea370e49effffb5e965309c80dd8061a91bd26753e06fc10"} {"level":"info","ts":"2026-07-10T19:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4595aff0d2db467174b2ca7a1409608fa67389278dcd87a00aa9ed178579532","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d629d8513fecbbd26b8943dbfa5a2c669177bf3896794f1a5ecf18abd87bb5a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4595aff0d2db467174b2ca7a1409608fa67389278dcd87a00aa9ed178579532","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:10:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:10:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a4595aff0d2db467174b2ca7a1409608fa67389278dcd87a00aa9ed178579532"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-10T19:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a4595aff0d2db467174b2ca7a1409608fa67389278dcd87a00aa9ed178579532","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a4595aff0d2db467174b2ca7a1409608fa67389278dcd87a00aa9ed178579532\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-10T19:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4595aff0d2db467174b2ca7a1409608fa67389278dcd87a00aa9ed178579532","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d6ed36849896a7f248ac92340bdc53cfcdb1cb72a30e1faa8912dd5ef2bd414"} {"level":"debug","ts":"2026-07-10T19:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d629d8513fecbbd26b8943dbfa5a2c669177bf3896794f1a5ecf18abd87bb5a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:10:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:10:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d629d8513fecbbd26b8943dbfa5a2c669177bf3896794f1a5ecf18abd87bb5a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4595aff0d2db467174b2ca7a1409608fa67389278dcd87a00aa9ed178579532","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d629d8513fecbbd26b8943dbfa5a2c669177bf3896794f1a5ecf18abd87bb5a8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d629d8513fecbbd26b8943dbfa5a2c669177bf3896794f1a5ecf18abd87bb5a8"} {"level":"debug","ts":"2026-07-10T19:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d629d8513fecbbd26b8943dbfa5a2c669177bf3896794f1a5ecf18abd87bb5a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:10:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:10:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d629d8513fecbbd26b8943dbfa5a2c669177bf3896794f1a5ecf18abd87bb5a8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4595aff0d2db467174b2ca7a1409608fa67389278dcd87a00aa9ed178579532"} {"level":"info","ts":"2026-07-10T19:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d629d8513fecbbd26b8943dbfa5a2c669177bf3896794f1a5ecf18abd87bb5a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d629d8513fecbbd26b8943dbfa5a2c669177bf3896794f1a5ecf18abd87bb5a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:10:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:10:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d629d8513fecbbd26b8943dbfa5a2c669177bf3896794f1a5ecf18abd87bb5a8"} {"level":"info","ts":"2026-07-10T19:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d629d8513fecbbd26b8943dbfa5a2c669177bf3896794f1a5ecf18abd87bb5a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d629d8513fecbbd26b8943dbfa5a2c669177bf3896794f1a5ecf18abd87bb5a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4aca2234adc63a294a9b6e4b7200404d711d89bdd0c812118ea1adf73d5e53cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:10:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:10:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4aca2234adc63a294a9b6e4b7200404d711d89bdd0c812118ea1adf73d5e53cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d629d8513fecbbd26b8943dbfa5a2c669177bf3896794f1a5ecf18abd87bb5a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4aca2234adc63a294a9b6e4b7200404d711d89bdd0c812118ea1adf73d5e53cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4aca2234adc63a294a9b6e4b7200404d711d89bdd0c812118ea1adf73d5e53cd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d629d8513fecbbd26b8943dbfa5a2c669177bf3896794f1a5ecf18abd87bb5a8"} {"level":"debug","ts":"2026-07-10T19:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d629d8513fecbbd26b8943dbfa5a2c669177bf3896794f1a5ecf18abd87bb5a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:10:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:10:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d629d8513fecbbd26b8943dbfa5a2c669177bf3896794f1a5ecf18abd87bb5a8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d629d8513fecbbd26b8943dbfa5a2c669177bf3896794f1a5ecf18abd87bb5a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4aca2234adc63a294a9b6e4b7200404d711d89bdd0c812118ea1adf73d5e53cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:10:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:10:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4aca2234adc63a294a9b6e4b7200404d711d89bdd0c812118ea1adf73d5e53cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d629d8513fecbbd26b8943dbfa5a2c669177bf3896794f1a5ecf18abd87bb5a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4aca2234adc63a294a9b6e4b7200404d711d89bdd0c812118ea1adf73d5e53cd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4aca2234adc63a294a9b6e4b7200404d711d89bdd0c812118ea1adf73d5e53cd"} {"level":"debug","ts":"2026-07-10T19:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a06b954b9a7233dff4a103bc042598cc9573a009f01e787220210413d558aea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:10:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:10:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a06b954b9a7233dff4a103bc042598cc9573a009f01e787220210413d558aea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4aca2234adc63a294a9b6e4b7200404d711d89bdd0c812118ea1adf73d5e53cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:10:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:10:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4aca2234adc63a294a9b6e4b7200404d711d89bdd0c812118ea1adf73d5e53cd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d629d8513fecbbd26b8943dbfa5a2c669177bf3896794f1a5ecf18abd87bb5a8"} {"level":"info","ts":"2026-07-10T19:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4aca2234adc63a294a9b6e4b7200404d711d89bdd0c812118ea1adf73d5e53cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a06b954b9a7233dff4a103bc042598cc9573a009f01e787220210413d558aea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4aca2234adc63a294a9b6e4b7200404d711d89bdd0c812118ea1adf73d5e53cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:10:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:10:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4aca2234adc63a294a9b6e4b7200404d711d89bdd0c812118ea1adf73d5e53cd"} {"level":"info","ts":"2026-07-10T19:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4aca2234adc63a294a9b6e4b7200404d711d89bdd0c812118ea1adf73d5e53cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a06b954b9a7233dff4a103bc042598cc9573a009f01e787220210413d558aea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:10:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:10:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a06b954b9a7233dff4a103bc042598cc9573a009f01e787220210413d558aea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4aca2234adc63a294a9b6e4b7200404d711d89bdd0c812118ea1adf73d5e53cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:10:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:10:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4aca2234adc63a294a9b6e4b7200404d711d89bdd0c812118ea1adf73d5e53cd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a06b954b9a7233dff4a103bc042598cc9573a009f01e787220210413d558aea"} {"level":"info","ts":"2026-07-10T19:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4aca2234adc63a294a9b6e4b7200404d711d89bdd0c812118ea1adf73d5e53cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a06b954b9a7233dff4a103bc042598cc9573a009f01e787220210413d558aea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:10:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:10:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5a06b954b9a7233dff4a103bc042598cc9573a009f01e787220210413d558aea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4aca2234adc63a294a9b6e4b7200404d711d89bdd0c812118ea1adf73d5e53cd"} {"level":"info","ts":"2026-07-10T19:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a06b954b9a7233dff4a103bc042598cc9573a009f01e787220210413d558aea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4aca2234adc63a294a9b6e4b7200404d711d89bdd0c812118ea1adf73d5e53cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a06b954b9a7233dff4a103bc042598cc9573a009f01e787220210413d558aea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a06b954b9a7233dff4a103bc042598cc9573a009f01e787220210413d558aea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:10:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:10:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a06b954b9a7233dff4a103bc042598cc9573a009f01e787220210413d558aea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a06b954b9a7233dff4a103bc042598cc9573a009f01e787220210413d558aea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:10:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:10:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a06b954b9a7233dff4a103bc042598cc9573a009f01e787220210413d558aea"} {"level":"error","ts":"2026-07-10T19:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5a06b954b9a7233dff4a103bc042598cc9573a009f01e787220210413d558aea","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5a06b954b9a7233dff4a103bc042598cc9573a009f01e787220210413d558aea\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-10T19:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a06b954b9a7233dff4a103bc042598cc9573a009f01e787220210413d558aea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:10:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:10:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5a06b954b9a7233dff4a103bc042598cc9573a009f01e787220210413d558aea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a06b954b9a7233dff4a103bc042598cc9573a009f01e787220210413d558aea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a06b954b9a7233dff4a103bc042598cc9573a009f01e787220210413d558aea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:10:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:10:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5a06b954b9a7233dff4a103bc042598cc9573a009f01e787220210413d558aea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4aca2234adc63a294a9b6e4b7200404d711d89bdd0c812118ea1adf73d5e53cd"} {"level":"error","ts":"2026-07-10T19:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5a06b954b9a7233dff4a103bc042598cc9573a009f01e787220210413d558aea","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5a06b954b9a7233dff4a103bc042598cc9573a009f01e787220210413d558aea\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-10T19:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a06b954b9a7233dff4a103bc042598cc9573a009f01e787220210413d558aea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:10:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:10:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a06b954b9a7233dff4a103bc042598cc9573a009f01e787220210413d558aea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a06b954b9a7233dff4a103bc042598cc9573a009f01e787220210413d558aea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:10:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:10:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-10T19:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5a06b954b9a7233dff4a103bc042598cc9573a009f01e787220210413d558aea","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5a06b954b9a7233dff4a103bc042598cc9573a009f01e787220210413d558aea\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"info","ts":"2026-07-10T19:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a06b954b9a7233dff4a103bc042598cc9573a009f01e787220210413d558aea"} {"level":"debug","ts":"2026-07-10T19:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a06b954b9a7233dff4a103bc042598cc9573a009f01e787220210413d558aea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:10:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:10:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5a06b954b9a7233dff4a103bc042598cc9573a009f01e787220210413d558aea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a06b954b9a7233dff4a103bc042598cc9573a009f01e787220210413d558aea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a06b954b9a7233dff4a103bc042598cc9573a009f01e787220210413d558aea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a06b954b9a7233dff4a103bc042598cc9573a009f01e787220210413d558aea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:10:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:10:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a06b954b9a7233dff4a103bc042598cc9573a009f01e787220210413d558aea"} {"level":"info","ts":"2026-07-10T19:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a06b954b9a7233dff4a103bc042598cc9573a009f01e787220210413d558aea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a06b954b9a7233dff4a103bc042598cc9573a009f01e787220210413d558aea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:10:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:10:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-10T19:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5a06b954b9a7233dff4a103bc042598cc9573a009f01e787220210413d558aea","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5a06b954b9a7233dff4a103bc042598cc9573a009f01e787220210413d558aea\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-10T19:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a06b954b9a7233dff4a103bc042598cc9573a009f01e787220210413d558aea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a06b954b9a7233dff4a103bc042598cc9573a009f01e787220210413d558aea","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a06b954b9a7233dff4a103bc042598cc9573a009f01e787220210413d558aea"} {"level":"info","ts":"2026-07-10T19:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a06b954b9a7233dff4a103bc042598cc9573a009f01e787220210413d558aea"} {"level":"debug","ts":"2026-07-10T19:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a06b954b9a7233dff4a103bc042598cc9573a009f01e787220210413d558aea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:10:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:10:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5a06b954b9a7233dff4a103bc042598cc9573a009f01e787220210413d558aea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a06b954b9a7233dff4a103bc042598cc9573a009f01e787220210413d558aea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a06b954b9a7233dff4a103bc042598cc9573a009f01e787220210413d558aea","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a06b954b9a7233dff4a103bc042598cc9573a009f01e787220210413d558aea"} {"level":"debug","ts":"2026-07-10T19:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfd941dbe8baef1eb9c088d6b45888b5cb6f5211b352a86fe0856dec10522550","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:10:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:10:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfd941dbe8baef1eb9c088d6b45888b5cb6f5211b352a86fe0856dec10522550","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfd941dbe8baef1eb9c088d6b45888b5cb6f5211b352a86fe0856dec10522550","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfd941dbe8baef1eb9c088d6b45888b5cb6f5211b352a86fe0856dec10522550","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfd941dbe8baef1eb9c088d6b45888b5cb6f5211b352a86fe0856dec10522550"} {"level":"debug","ts":"2026-07-10T19:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfd941dbe8baef1eb9c088d6b45888b5cb6f5211b352a86fe0856dec10522550","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfd941dbe8baef1eb9c088d6b45888b5cb6f5211b352a86fe0856dec10522550"} {"level":"debug","ts":"2026-07-10T19:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfd941dbe8baef1eb9c088d6b45888b5cb6f5211b352a86fe0856dec10522550","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:10:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:10:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bfd941dbe8baef1eb9c088d6b45888b5cb6f5211b352a86fe0856dec10522550"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfd941dbe8baef1eb9c088d6b45888b5cb6f5211b352a86fe0856dec10522550","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfd941dbe8baef1eb9c088d6b45888b5cb6f5211b352a86fe0856dec10522550","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:10:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:10:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfd941dbe8baef1eb9c088d6b45888b5cb6f5211b352a86fe0856dec10522550","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d4190739a24e27a042ad3cbbb6590ff77c32fe76e24ce647e00f8d625d892fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfd941dbe8baef1eb9c088d6b45888b5cb6f5211b352a86fe0856dec10522550","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfd941dbe8baef1eb9c088d6b45888b5cb6f5211b352a86fe0856dec10522550","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfd941dbe8baef1eb9c088d6b45888b5cb6f5211b352a86fe0856dec10522550"} {"level":"debug","ts":"2026-07-10T19:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfd941dbe8baef1eb9c088d6b45888b5cb6f5211b352a86fe0856dec10522550","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:10:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:10:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bfd941dbe8baef1eb9c088d6b45888b5cb6f5211b352a86fe0856dec10522550"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d4190739a24e27a042ad3cbbb6590ff77c32fe76e24ce647e00f8d625d892fd"} {"level":"info","ts":"2026-07-10T19:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfd941dbe8baef1eb9c088d6b45888b5cb6f5211b352a86fe0856dec10522550","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfd941dbe8baef1eb9c088d6b45888b5cb6f5211b352a86fe0856dec10522550","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:10:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:10:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfd941dbe8baef1eb9c088d6b45888b5cb6f5211b352a86fe0856dec10522550"} {"level":"info","ts":"2026-07-10T19:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfd941dbe8baef1eb9c088d6b45888b5cb6f5211b352a86fe0856dec10522550","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfd941dbe8baef1eb9c088d6b45888b5cb6f5211b352a86fe0856dec10522550","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfd941dbe8baef1eb9c088d6b45888b5cb6f5211b352a86fe0856dec10522550","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfd941dbe8baef1eb9c088d6b45888b5cb6f5211b352a86fe0856dec10522550"} {"level":"debug","ts":"2026-07-10T19:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfd941dbe8baef1eb9c088d6b45888b5cb6f5211b352a86fe0856dec10522550","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfd941dbe8baef1eb9c088d6b45888b5cb6f5211b352a86fe0856dec10522550"} {"level":"debug","ts":"2026-07-10T19:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfd941dbe8baef1eb9c088d6b45888b5cb6f5211b352a86fe0856dec10522550","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:10:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:10:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bfd941dbe8baef1eb9c088d6b45888b5cb6f5211b352a86fe0856dec10522550"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfd941dbe8baef1eb9c088d6b45888b5cb6f5211b352a86fe0856dec10522550","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfd941dbe8baef1eb9c088d6b45888b5cb6f5211b352a86fe0856dec10522550","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:10:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:10:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfd941dbe8baef1eb9c088d6b45888b5cb6f5211b352a86fe0856dec10522550","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfd941dbe8baef1eb9c088d6b45888b5cb6f5211b352a86fe0856dec10522550","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfd941dbe8baef1eb9c088d6b45888b5cb6f5211b352a86fe0856dec10522550","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfd941dbe8baef1eb9c088d6b45888b5cb6f5211b352a86fe0856dec10522550"} {"level":"debug","ts":"2026-07-10T19:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfd941dbe8baef1eb9c088d6b45888b5cb6f5211b352a86fe0856dec10522550","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfd941dbe8baef1eb9c088d6b45888b5cb6f5211b352a86fe0856dec10522550"} {"level":"debug","ts":"2026-07-10T19:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46264fcc3a582f4da0ee410ae463acae3b5a7d237d341d06aff9842310a2f27b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:10:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:10:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46264fcc3a582f4da0ee410ae463acae3b5a7d237d341d06aff9842310a2f27b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46264fcc3a582f4da0ee410ae463acae3b5a7d237d341d06aff9842310a2f27b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4595aff0d2db467174b2ca7a1409608fa67389278dcd87a00aa9ed178579532","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46264fcc3a582f4da0ee410ae463acae3b5a7d237d341d06aff9842310a2f27b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46264fcc3a582f4da0ee410ae463acae3b5a7d237d341d06aff9842310a2f27b"} {"level":"debug","ts":"2026-07-10T19:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfd941dbe8baef1eb9c088d6b45888b5cb6f5211b352a86fe0856dec10522550","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:10:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:10:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bfd941dbe8baef1eb9c088d6b45888b5cb6f5211b352a86fe0856dec10522550"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4595aff0d2db467174b2ca7a1409608fa67389278dcd87a00aa9ed178579532"} {"level":"info","ts":"2026-07-10T19:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfd941dbe8baef1eb9c088d6b45888b5cb6f5211b352a86fe0856dec10522550","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46264fcc3a582f4da0ee410ae463acae3b5a7d237d341d06aff9842310a2f27b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfd941dbe8baef1eb9c088d6b45888b5cb6f5211b352a86fe0856dec10522550","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46264fcc3a582f4da0ee410ae463acae3b5a7d237d341d06aff9842310a2f27b"} {"level":"info","ts":"2026-07-10T19:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfd941dbe8baef1eb9c088d6b45888b5cb6f5211b352a86fe0856dec10522550"} {"level":"debug","ts":"2026-07-10T19:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46264fcc3a582f4da0ee410ae463acae3b5a7d237d341d06aff9842310a2f27b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:10:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:10:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["46264fcc3a582f4da0ee410ae463acae3b5a7d237d341d06aff9842310a2f27b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46264fcc3a582f4da0ee410ae463acae3b5a7d237d341d06aff9842310a2f27b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d6ed36849896a7f248ac92340bdc53cfcdb1cb72a30e1faa8912dd5ef2bd414","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:10:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:10:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d6ed36849896a7f248ac92340bdc53cfcdb1cb72a30e1faa8912dd5ef2bd414","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46264fcc3a582f4da0ee410ae463acae3b5a7d237d341d06aff9842310a2f27b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d6ed36849896a7f248ac92340bdc53cfcdb1cb72a30e1faa8912dd5ef2bd414","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d6ed36849896a7f248ac92340bdc53cfcdb1cb72a30e1faa8912dd5ef2bd414","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d6ed36849896a7f248ac92340bdc53cfcdb1cb72a30e1faa8912dd5ef2bd414"} {"level":"debug","ts":"2026-07-10T19:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d6ed36849896a7f248ac92340bdc53cfcdb1cb72a30e1faa8912dd5ef2bd414","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:10:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:10:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7d6ed36849896a7f248ac92340bdc53cfcdb1cb72a30e1faa8912dd5ef2bd414"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46264fcc3a582f4da0ee410ae463acae3b5a7d237d341d06aff9842310a2f27b"} {"level":"info","ts":"2026-07-10T19:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d6ed36849896a7f248ac92340bdc53cfcdb1cb72a30e1faa8912dd5ef2bd414","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d6ed36849896a7f248ac92340bdc53cfcdb1cb72a30e1faa8912dd5ef2bd414","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:10:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:10:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d6ed36849896a7f248ac92340bdc53cfcdb1cb72a30e1faa8912dd5ef2bd414"} {"level":"info","ts":"2026-07-10T19:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d6ed36849896a7f248ac92340bdc53cfcdb1cb72a30e1faa8912dd5ef2bd414","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d6ed36849896a7f248ac92340bdc53cfcdb1cb72a30e1faa8912dd5ef2bd414","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d6ed36849896a7f248ac92340bdc53cfcdb1cb72a30e1faa8912dd5ef2bd414","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d6ed36849896a7f248ac92340bdc53cfcdb1cb72a30e1faa8912dd5ef2bd414"} {"level":"debug","ts":"2026-07-10T19:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d6ed36849896a7f248ac92340bdc53cfcdb1cb72a30e1faa8912dd5ef2bd414","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e519c81932687124c79c40aa5d23a5c4ac24c2fca8a62ffbd79239cd7d27731","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d6ed36849896a7f248ac92340bdc53cfcdb1cb72a30e1faa8912dd5ef2bd414"} {"level":"info","ts":"2026-07-10T19:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e519c81932687124c79c40aa5d23a5c4ac24c2fca8a62ffbd79239cd7d27731"} {"level":"debug","ts":"2026-07-10T19:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d6ed36849896a7f248ac92340bdc53cfcdb1cb72a30e1faa8912dd5ef2bd414","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:10:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:10:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7d6ed36849896a7f248ac92340bdc53cfcdb1cb72a30e1faa8912dd5ef2bd414"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d6ed36849896a7f248ac92340bdc53cfcdb1cb72a30e1faa8912dd5ef2bd414","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d6ed36849896a7f248ac92340bdc53cfcdb1cb72a30e1faa8912dd5ef2bd414","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:10:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:10:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d6ed36849896a7f248ac92340bdc53cfcdb1cb72a30e1faa8912dd5ef2bd414","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d6ed36849896a7f248ac92340bdc53cfcdb1cb72a30e1faa8912dd5ef2bd414","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d6ed36849896a7f248ac92340bdc53cfcdb1cb72a30e1faa8912dd5ef2bd414","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d6ed36849896a7f248ac92340bdc53cfcdb1cb72a30e1faa8912dd5ef2bd414"} {"level":"debug","ts":"2026-07-10T19:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d6ed36849896a7f248ac92340bdc53cfcdb1cb72a30e1faa8912dd5ef2bd414","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d6ed36849896a7f248ac92340bdc53cfcdb1cb72a30e1faa8912dd5ef2bd414"} {"level":"debug","ts":"2026-07-10T19:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dec1d67e33a7404112d76b421ddb160f51b7f51687037bb2eec5063d3dccfd70","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dec1d67e33a7404112d76b421ddb160f51b7f51687037bb2eec5063d3dccfd70"} {"level":"debug","ts":"2026-07-10T19:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d6ed36849896a7f248ac92340bdc53cfcdb1cb72a30e1faa8912dd5ef2bd414","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:10:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:10:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7d6ed36849896a7f248ac92340bdc53cfcdb1cb72a30e1faa8912dd5ef2bd414"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d6ed36849896a7f248ac92340bdc53cfcdb1cb72a30e1faa8912dd5ef2bd414","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d6ed36849896a7f248ac92340bdc53cfcdb1cb72a30e1faa8912dd5ef2bd414","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:10:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:10:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d6ed36849896a7f248ac92340bdc53cfcdb1cb72a30e1faa8912dd5ef2bd414","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d6ed36849896a7f248ac92340bdc53cfcdb1cb72a30e1faa8912dd5ef2bd414","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d6ed36849896a7f248ac92340bdc53cfcdb1cb72a30e1faa8912dd5ef2bd414","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d6ed36849896a7f248ac92340bdc53cfcdb1cb72a30e1faa8912dd5ef2bd414"} {"level":"debug","ts":"2026-07-10T19:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d6ed36849896a7f248ac92340bdc53cfcdb1cb72a30e1faa8912dd5ef2bd414","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d6ed36849896a7f248ac92340bdc53cfcdb1cb72a30e1faa8912dd5ef2bd414"} {"level":"debug","ts":"2026-07-10T19:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70ceca67ac86490f2eeede597aca67150da2adb513301b9f53d40dcc1276de47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:10:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:10:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70ceca67ac86490f2eeede597aca67150da2adb513301b9f53d40dcc1276de47","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70ceca67ac86490f2eeede597aca67150da2adb513301b9f53d40dcc1276de47","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70ceca67ac86490f2eeede597aca67150da2adb513301b9f53d40dcc1276de47","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70ceca67ac86490f2eeede597aca67150da2adb513301b9f53d40dcc1276de47"} {"level":"debug","ts":"2026-07-10T19:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d6ed36849896a7f248ac92340bdc53cfcdb1cb72a30e1faa8912dd5ef2bd414","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:10:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:10:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7d6ed36849896a7f248ac92340bdc53cfcdb1cb72a30e1faa8912dd5ef2bd414"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70ceca67ac86490f2eeede597aca67150da2adb513301b9f53d40dcc1276de47"} {"level":"info","ts":"2026-07-10T19:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d6ed36849896a7f248ac92340bdc53cfcdb1cb72a30e1faa8912dd5ef2bd414","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70ceca67ac86490f2eeede597aca67150da2adb513301b9f53d40dcc1276de47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:10:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:10:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["70ceca67ac86490f2eeede597aca67150da2adb513301b9f53d40dcc1276de47"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70ceca67ac86490f2eeede597aca67150da2adb513301b9f53d40dcc1276de47","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d6ed36849896a7f248ac92340bdc53cfcdb1cb72a30e1faa8912dd5ef2bd414","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:10:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:10:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d6ed36849896a7f248ac92340bdc53cfcdb1cb72a30e1faa8912dd5ef2bd414"} {"level":"info","ts":"2026-07-10T19:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d6ed36849896a7f248ac92340bdc53cfcdb1cb72a30e1faa8912dd5ef2bd414","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70ceca67ac86490f2eeede597aca67150da2adb513301b9f53d40dcc1276de47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:10:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:10:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70ceca67ac86490f2eeede597aca67150da2adb513301b9f53d40dcc1276de47","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d6ed36849896a7f248ac92340bdc53cfcdb1cb72a30e1faa8912dd5ef2bd414","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:10:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:10:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7d6ed36849896a7f248ac92340bdc53cfcdb1cb72a30e1faa8912dd5ef2bd414"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70ceca67ac86490f2eeede597aca67150da2adb513301b9f53d40dcc1276de47"} {"level":"info","ts":"2026-07-10T19:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d6ed36849896a7f248ac92340bdc53cfcdb1cb72a30e1faa8912dd5ef2bd414","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70ceca67ac86490f2eeede597aca67150da2adb513301b9f53d40dcc1276de47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:10:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:10:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["70ceca67ac86490f2eeede597aca67150da2adb513301b9f53d40dcc1276de47"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70ceca67ac86490f2eeede597aca67150da2adb513301b9f53d40dcc1276de47","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d6ed36849896a7f248ac92340bdc53cfcdb1cb72a30e1faa8912dd5ef2bd414","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:10:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:10:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d6ed36849896a7f248ac92340bdc53cfcdb1cb72a30e1faa8912dd5ef2bd414"} {"level":"info","ts":"2026-07-10T19:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d6ed36849896a7f248ac92340bdc53cfcdb1cb72a30e1faa8912dd5ef2bd414","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"003e8f7c9ad8f092e2a79ab25d6edd6d29cbd83f7a7432532f05bd22de2de6cf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70ceca67ac86490f2eeede597aca67150da2adb513301b9f53d40dcc1276de47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:10:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:10:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70ceca67ac86490f2eeede597aca67150da2adb513301b9f53d40dcc1276de47"} {"level":"info","ts":"2026-07-10T19:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70ceca67ac86490f2eeede597aca67150da2adb513301b9f53d40dcc1276de47","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d6ed36849896a7f248ac92340bdc53cfcdb1cb72a30e1faa8912dd5ef2bd414","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:10:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:10:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7d6ed36849896a7f248ac92340bdc53cfcdb1cb72a30e1faa8912dd5ef2bd414"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d6ed36849896a7f248ac92340bdc53cfcdb1cb72a30e1faa8912dd5ef2bd414","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70ceca67ac86490f2eeede597aca67150da2adb513301b9f53d40dcc1276de47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:10:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:10:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["70ceca67ac86490f2eeede597aca67150da2adb513301b9f53d40dcc1276de47"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70ceca67ac86490f2eeede597aca67150da2adb513301b9f53d40dcc1276de47","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d6ed36849896a7f248ac92340bdc53cfcdb1cb72a30e1faa8912dd5ef2bd414","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70ceca67ac86490f2eeede597aca67150da2adb513301b9f53d40dcc1276de47","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/003e8f7c9ad8f092e2a79ab25d6edd6d29cbd83f7a7432532f05bd22de2de6cf"} {"level":"debug","ts":"2026-07-10T19:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd6c442a3165f1d1b0f79742711ab07fbeea4c8c529f1e2c8033d8956080c15c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d6ed36849896a7f248ac92340bdc53cfcdb1cb72a30e1faa8912dd5ef2bd414"} {"level":"info","ts":"2026-07-10T19:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70ceca67ac86490f2eeede597aca67150da2adb513301b9f53d40dcc1276de47"} {"level":"info","ts":"2026-07-10T19:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd6c442a3165f1d1b0f79742711ab07fbeea4c8c529f1e2c8033d8956080c15c"} {"level":"debug","ts":"2026-07-10T19:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36926324f558b8d47d838eb68bef8b32ac3885019930684ae92ea57eb447255f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a3c5313f1f2921b164df59a0db68e3323d7059fc1916e8c7ba36fc082ae8dbcc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36926324f558b8d47d838eb68bef8b32ac3885019930684ae92ea57eb447255f"} {"level":"info","ts":"2026-07-10T19:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3c5313f1f2921b164df59a0db68e3323d7059fc1916e8c7ba36fc082ae8dbcc"} {"level":"debug","ts":"2026-07-10T19:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a06b954b9a7233dff4a103bc042598cc9573a009f01e787220210413d558aea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:10:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:10:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a06b954b9a7233dff4a103bc042598cc9573a009f01e787220210413d558aea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a06b954b9a7233dff4a103bc042598cc9573a009f01e787220210413d558aea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a76f1e5a6b6f8996a1a78221fc605784438fe1d51850e8e713f3c457149ff52d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a06b954b9a7233dff4a103bc042598cc9573a009f01e787220210413d558aea","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a06b954b9a7233dff4a103bc042598cc9573a009f01e787220210413d558aea"} {"level":"debug","ts":"2026-07-10T19:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35322e841f878a999b9fb319d53b4ede55fab1a3f4e612b55f96e99b3dae2210","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a06b954b9a7233dff4a103bc042598cc9573a009f01e787220210413d558aea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:10:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:10:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5a06b954b9a7233dff4a103bc042598cc9573a009f01e787220210413d558aea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a76f1e5a6b6f8996a1a78221fc605784438fe1d51850e8e713f3c457149ff52d"} {"level":"info","ts":"2026-07-10T19:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a06b954b9a7233dff4a103bc042598cc9573a009f01e787220210413d558aea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a06b954b9a7233dff4a103bc042598cc9573a009f01e787220210413d558aea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:10:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:10:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a06b954b9a7233dff4a103bc042598cc9573a009f01e787220210413d558aea"} {"level":"info","ts":"2026-07-10T19:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a06b954b9a7233dff4a103bc042598cc9573a009f01e787220210413d558aea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a06b954b9a7233dff4a103bc042598cc9573a009f01e787220210413d558aea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:10:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:10:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5a06b954b9a7233dff4a103bc042598cc9573a009f01e787220210413d558aea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a06b954b9a7233dff4a103bc042598cc9573a009f01e787220210413d558aea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a06b954b9a7233dff4a103bc042598cc9573a009f01e787220210413d558aea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:10:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:10:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5a06b954b9a7233dff4a103bc042598cc9573a009f01e787220210413d558aea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35322e841f878a999b9fb319d53b4ede55fab1a3f4e612b55f96e99b3dae2210"} {"level":"error","ts":"2026-07-10T19:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5a06b954b9a7233dff4a103bc042598cc9573a009f01e787220210413d558aea","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5a06b954b9a7233dff4a103bc042598cc9573a009f01e787220210413d558aea\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-10T19:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a06b954b9a7233dff4a103bc042598cc9573a009f01e787220210413d558aea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:10:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:10:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a06b954b9a7233dff4a103bc042598cc9573a009f01e787220210413d558aea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37c2aac016442a0ea3af875455f9636f9678e55ab49194e7078ff69a97fcb0ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a06b954b9a7233dff4a103bc042598cc9573a009f01e787220210413d558aea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:10:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:10:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a06b954b9a7233dff4a103bc042598cc9573a009f01e787220210413d558aea"} {"level":"error","ts":"2026-07-10T19:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5a06b954b9a7233dff4a103bc042598cc9573a009f01e787220210413d558aea","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5a06b954b9a7233dff4a103bc042598cc9573a009f01e787220210413d558aea\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-10T19:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7dab56c8b67edfb4ee11a943a0df0c0a466dd4cfd2dafe594ac6127780a5968","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a06b954b9a7233dff4a103bc042598cc9573a009f01e787220210413d558aea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:10:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:10:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5a06b954b9a7233dff4a103bc042598cc9573a009f01e787220210413d558aea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a06b954b9a7233dff4a103bc042598cc9573a009f01e787220210413d558aea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eace3bb039c229aa713a42c97b5feaf6bcf93778910a0dcae5888dc35d67d31c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a06b954b9a7233dff4a103bc042598cc9573a009f01e787220210413d558aea","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37c2aac016442a0ea3af875455f9636f9678e55ab49194e7078ff69a97fcb0ee"} {"level":"debug","ts":"2026-07-10T19:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a06b954b9a7233dff4a103bc042598cc9573a009f01e787220210413d558aea","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7dab56c8b67edfb4ee11a943a0df0c0a466dd4cfd2dafe594ac6127780a5968"} {"level":"info","ts":"2026-07-10T19:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a06b954b9a7233dff4a103bc042598cc9573a009f01e787220210413d558aea"} {"level":"debug","ts":"2026-07-10T19:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dfe8ef1a9af1a1204ec43304f443a5ef3a6e3fe57a18deb1e094e93f15b7548d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eace3bb039c229aa713a42c97b5feaf6bcf93778910a0dcae5888dc35d67d31c"} {"level":"debug","ts":"2026-07-10T19:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0298d6954ca4fe78ea370e49effffb5e965309c80dd8061a91bd26753e06fc10","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dfe8ef1a9af1a1204ec43304f443a5ef3a6e3fe57a18deb1e094e93f15b7548d"} {"level":"debug","ts":"2026-07-10T19:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d629d8513fecbbd26b8943dbfa5a2c669177bf3896794f1a5ecf18abd87bb5a8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0298d6954ca4fe78ea370e49effffb5e965309c80dd8061a91bd26753e06fc10"} {"level":"info","ts":"2026-07-10T19:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d629d8513fecbbd26b8943dbfa5a2c669177bf3896794f1a5ecf18abd87bb5a8"} {"level":"debug","ts":"2026-07-10T19:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f465663dc4b6fda45345797d2e2a55840bfcab883d7330847dd33730c74a78a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:10:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:10:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f465663dc4b6fda45345797d2e2a55840bfcab883d7330847dd33730c74a78a4"} {"level":"info","ts":"2026-07-10T19:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f465663dc4b6fda45345797d2e2a55840bfcab883d7330847dd33730c74a78a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4aca2234adc63a294a9b6e4b7200404d711d89bdd0c812118ea1adf73d5e53cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:10:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:10:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4aca2234adc63a294a9b6e4b7200404d711d89bdd0c812118ea1adf73d5e53cd"} {"level":"info","ts":"2026-07-10T19:10:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4aca2234adc63a294a9b6e4b7200404d711d89bdd0c812118ea1adf73d5e53cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f465663dc4b6fda45345797d2e2a55840bfcab883d7330847dd33730c74a78a4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:10:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f465663dc4b6fda45345797d2e2a55840bfcab883d7330847dd33730c74a78a4"} {"level":"debug","ts":"2026-07-10T19:10:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9bfc637a6a83c4b194839158e6f3a76e6ce779f29d8f75bf264072efa3261de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4aca2234adc63a294a9b6e4b7200404d711d89bdd0c812118ea1adf73d5e53cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:10:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:10:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4aca2234adc63a294a9b6e4b7200404d711d89bdd0c812118ea1adf73d5e53cd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:10:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9bfc637a6a83c4b194839158e6f3a76e6ce779f29d8f75bf264072efa3261de"} {"level":"info","ts":"2026-07-10T19:10:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4aca2234adc63a294a9b6e4b7200404d711d89bdd0c812118ea1adf73d5e53cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f465663dc4b6fda45345797d2e2a55840bfcab883d7330847dd33730c74a78a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:10:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:10:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f465663dc4b6fda45345797d2e2a55840bfcab883d7330847dd33730c74a78a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:10:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4aca2234adc63a294a9b6e4b7200404d711d89bdd0c812118ea1adf73d5e53cd"} {"level":"info","ts":"2026-07-10T19:10:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f465663dc4b6fda45345797d2e2a55840bfcab883d7330847dd33730c74a78a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4aca2234adc63a294a9b6e4b7200404d711d89bdd0c812118ea1adf73d5e53cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:10:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:10:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:10:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4aca2234adc63a294a9b6e4b7200404d711d89bdd0c812118ea1adf73d5e53cd"} {"level":"info","ts":"2026-07-10T19:10:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4aca2234adc63a294a9b6e4b7200404d711d89bdd0c812118ea1adf73d5e53cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f465663dc4b6fda45345797d2e2a55840bfcab883d7330847dd33730c74a78a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:10:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:10:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:10:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f465663dc4b6fda45345797d2e2a55840bfcab883d7330847dd33730c74a78a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4aca2234adc63a294a9b6e4b7200404d711d89bdd0c812118ea1adf73d5e53cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:10:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:10:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4aca2234adc63a294a9b6e4b7200404d711d89bdd0c812118ea1adf73d5e53cd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:10:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f465663dc4b6fda45345797d2e2a55840bfcab883d7330847dd33730c74a78a4"} {"level":"info","ts":"2026-07-10T19:10:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4aca2234adc63a294a9b6e4b7200404d711d89bdd0c812118ea1adf73d5e53cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f465663dc4b6fda45345797d2e2a55840bfcab883d7330847dd33730c74a78a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:10:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:10:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f465663dc4b6fda45345797d2e2a55840bfcab883d7330847dd33730c74a78a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:10:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4aca2234adc63a294a9b6e4b7200404d711d89bdd0c812118ea1adf73d5e53cd"} {"level":"info","ts":"2026-07-10T19:10:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f465663dc4b6fda45345797d2e2a55840bfcab883d7330847dd33730c74a78a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4aca2234adc63a294a9b6e4b7200404d711d89bdd0c812118ea1adf73d5e53cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f465663dc4b6fda45345797d2e2a55840bfcab883d7330847dd33730c74a78a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:10:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:10:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:10:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f465663dc4b6fda45345797d2e2a55840bfcab883d7330847dd33730c74a78a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f465663dc4b6fda45345797d2e2a55840bfcab883d7330847dd33730c74a78a4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:10:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f465663dc4b6fda45345797d2e2a55840bfcab883d7330847dd33730c74a78a4"} {"level":"debug","ts":"2026-07-10T19:10:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f465663dc4b6fda45345797d2e2a55840bfcab883d7330847dd33730c74a78a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:10:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:10:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f465663dc4b6fda45345797d2e2a55840bfcab883d7330847dd33730c74a78a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T19:10:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f465663dc4b6fda45345797d2e2a55840bfcab883d7330847dd33730c74a78a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T19:10:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f465663dc4b6fda45345797d2e2a55840bfcab883d7330847dd33730c74a78a4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T19:10:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4aca2234adc63a294a9b6e4b7200404d711d89bdd0c812118ea1adf73d5e53cd"} {"level":"info","ts":"2026-07-10T19:10:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f465663dc4b6fda45345797d2e2a55840bfcab883d7330847dd33730c74a78a4"} {"level":"info","ts":"2026-07-10T19:10:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"42ab1962-28c3-482a-ab9d-9f4947d094f0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.16:43670","PortSpecifier":{"PortValue":43670}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"42ab1962-28c3-482a-ab9d-9f4947d094f0","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-33ca20.apps.d363791c-37c4-4115-b4f0-e1034407046f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T19:10:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"42ab1962-28c3-482a-ab9d-9f4947d094f0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.16:43670","PortSpecifier":{"PortValue":43670}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783710651,"nanos":591774705},"http":{"id":"42ab1962-28c3-482a-ab9d-9f4947d094f0","method":"POST","headers":{":authority":"e2e-shared-a-33ca20.apps.d363791c-37c4-4115-b4f0-e1034407046f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T19:10:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"42ab1962-28c3-482a-ab9d-9f4947d094f0","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T19:10:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"42ab1962-28c3-482a-ab9d-9f4947d094f0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6dd43bae-5856-4bf7-aa31-595588c0c7b9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f4bfb603-1d1c-4dfe-aa58-2bd1826c9b75"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e1034407046f"]}} {"level":"debug","ts":"2026-07-10T19:10:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"42ab1962-28c3-482a-ab9d-9f4947d094f0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e1034407046f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f4bfb603-1d1c-4dfe-aa58-2bd1826c9b75"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6dd43bae-5856-4bf7-aa31-595588c0c7b9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"dfe8ef1a9af1a1204ec43304f443a5ef3a6e3fe57a18deb1e094e93f15b7548d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-33ca20.apps.d363791c-37c4-4115-b4f0-e1034407046f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T19:10:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"42ab1962-28c3-482a-ab9d-9f4947d094f0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T19:10:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"42ab1962-28c3-482a-ab9d-9f4947d094f0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T19:10:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"42ab1962-28c3-482a-ab9d-9f4947d094f0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-33ca20/rate-test-model-33ca20\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T19:10:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"42ab1962-28c3-482a-ab9d-9f4947d094f0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T19:10:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"42ab1962-28c3-482a-ab9d-9f4947d094f0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T19:10:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"42ab1962-28c3-482a-ab9d-9f4947d094f0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T19:10:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"42ab1962-28c3-482a-ab9d-9f4947d094f0","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T19:10:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"42ab1962-28c3-482a-ab9d-9f4947d094f0","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T19:10:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"24805ed2-5551-4c06-8470-c88bb89c86f0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.16:57402","PortSpecifier":{"PortValue":57402}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"24805ed2-5551-4c06-8470-c88bb89c86f0","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-7b46a3.apps.d363791c-37c4-4115-b4f0-e1034407046f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T19:10:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"24805ed2-5551-4c06-8470-c88bb89c86f0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.16:57402","PortSpecifier":{"PortValue":57402}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783710651,"nanos":634377004},"http":{"id":"24805ed2-5551-4c06-8470-c88bb89c86f0","method":"POST","headers":{":authority":"e2e-shared-b-7b46a3.apps.d363791c-37c4-4115-b4f0-e1034407046f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T19:10:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"24805ed2-5551-4c06-8470-c88bb89c86f0","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T19:10:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"24805ed2-5551-4c06-8470-c88bb89c86f0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6dd43bae-5856-4bf7-aa31-595588c0c7b9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f4bfb603-1d1c-4dfe-aa58-2bd1826c9b75"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e1034407046f"]}} {"level":"debug","ts":"2026-07-10T19:10:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"24805ed2-5551-4c06-8470-c88bb89c86f0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e1034407046f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f4bfb603-1d1c-4dfe-aa58-2bd1826c9b75"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6dd43bae-5856-4bf7-aa31-595588c0c7b9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"35322e841f878a999b9fb319d53b4ede55fab1a3f4e612b55f96e99b3dae2210"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-7b46a3.apps.d363791c-37c4-4115-b4f0-e1034407046f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T19:10:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"24805ed2-5551-4c06-8470-c88bb89c86f0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T19:10:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"24805ed2-5551-4c06-8470-c88bb89c86f0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T19:10:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"24805ed2-5551-4c06-8470-c88bb89c86f0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-7b46a3/rate-test-model-7b46a3\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T19:10:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"24805ed2-5551-4c06-8470-c88bb89c86f0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T19:10:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"24805ed2-5551-4c06-8470-c88bb89c86f0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-10T19:10:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"24805ed2-5551-4c06-8470-c88bb89c86f0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-10T19:10:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"24805ed2-5551-4c06-8470-c88bb89c86f0","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T19:10:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"24805ed2-5551-4c06-8470-c88bb89c86f0","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T19:10:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5dd8852c-3105-4765-8c4e-f09209694bb5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.16:43676","PortSpecifier":{"PortValue":43676}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5dd8852c-3105-4765-8c4e-f09209694bb5","method":"POST","path":"/ai-tenant-e2e-shared-a-33ca20/rate-test-model-33ca20/v1/completions","host":"e2e-shared-a-33ca20.apps.d363791c-37c4-4115-b4f0-e1034407046f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T19:10:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5dd8852c-3105-4765-8c4e-f09209694bb5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.16:43676","PortSpecifier":{"PortValue":43676}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783710651,"nanos":674751202},"http":{"id":"5dd8852c-3105-4765-8c4e-f09209694bb5","method":"POST","headers":{":authority":"e2e-shared-a-33ca20.apps.d363791c-37c4-4115-b4f0-e1034407046f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-33ca20/rate-test-model-33ca20/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T19:10:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5dd8852c-3105-4765-8c4e-f09209694bb5","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-gMZblK2NMDebinMr_hwzN3iJx7fOXhD7UxHYGNHQbqcrIZPODAO3lIzsgPrI"} {"level":"debug","ts":"2026-07-10T19:10:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5dd8852c-3105-4765-8c4e-f09209694bb5","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-33ca20.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-gMZblK2NMDebinMr_hwzN3iJx7fOXhD7UxHYGNHQbqcrIZPODAO3lIzsgPrI\"}"} {"level":"debug","ts":"2026-07-10T19:10:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5dd8852c-3105-4765-8c4e-f09209694bb5","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-33ca20.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"fe7c3c96-5bd3-4be7-a58c-60027113dd45","keyName":"e2e-rate-a-b3f533","subscription":"e2e-rate-iso-a-b3f533","tenant":"e2e-shared-a-33ca20","userId":"fe7c3c96-5bd3-4be7-a58c-60027113dd45","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-10T19:10:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5dd8852c-3105-4765-8c4e-f09209694bb5","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-33ca20.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-33ca20/rate-test-model-33ca20\",\"requestedSubscription\":\"e2e-rate-iso-a-b3f533\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-10T19:10:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5dd8852c-3105-4765-8c4e-f09209694bb5","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-33ca20.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-33ca20","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b3f533","namespace":"ai-tenant-e2e-shared-a-33ca20","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-10T19:10:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5dd8852c-3105-4765-8c4e-f09209694bb5","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T19:10:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5dd8852c-3105-4765-8c4e-f09209694bb5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T19:10:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5dd8852c-3105-4765-8c4e-f09209694bb5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T19:10:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5dd8852c-3105-4765-8c4e-f09209694bb5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-33ca20/rate-test-model-33ca20\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T19:10:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5dd8852c-3105-4765-8c4e-f09209694bb5","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T19:10:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5dd8852c-3105-4765-8c4e-f09209694bb5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-10T19:10:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5dd8852c-3105-4765-8c4e-f09209694bb5","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-b3f533"} {"level":"debug","ts":"2026-07-10T19:10:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5dd8852c-3105-4765-8c4e-f09209694bb5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T19:10:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5dd8852c-3105-4765-8c4e-f09209694bb5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"fe7c3c96-5bd3-4be7-a58c-60027113dd45","keyName":"e2e-rate-a-b3f533","selected_subscription":"e2e-rate-iso-a-b3f533","selected_subscription_key":"ai-tenant-e2e-shared-a-33ca20/e2e-rate-iso-a-b3f533@ai-tenant-e2e-shared-a-33ca20/rate-test-model-33ca20","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-33ca20","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b3f533","namespace":"ai-tenant-e2e-shared-a-33ca20","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-10T19:10:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5dd8852c-3105-4765-8c4e-f09209694bb5","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T19:10:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5dd8852c-3105-4765-8c4e-f09209694bb5","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T19:10:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c4a3dc59-f3ef-4ffd-a24f-475827d0f93b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.16:43686","PortSpecifier":{"PortValue":43686}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c4a3dc59-f3ef-4ffd-a24f-475827d0f93b","method":"POST","path":"/ai-tenant-e2e-shared-a-33ca20/rate-test-model-33ca20/v1/completions","host":"e2e-shared-a-33ca20.apps.d363791c-37c4-4115-b4f0-e1034407046f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T19:10:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c4a3dc59-f3ef-4ffd-a24f-475827d0f93b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.16:43686","PortSpecifier":{"PortValue":43686}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783710652,"nanos":735275801},"http":{"id":"c4a3dc59-f3ef-4ffd-a24f-475827d0f93b","method":"POST","headers":{":authority":"e2e-shared-a-33ca20.apps.d363791c-37c4-4115-b4f0-e1034407046f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-33ca20/rate-test-model-33ca20/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T19:10:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c4a3dc59-f3ef-4ffd-a24f-475827d0f93b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-gMZblK2NMDebinMr_hwzN3iJx7fOXhD7UxHYGNHQbqcrIZPODAO3lIzsgPrI"} {"level":"debug","ts":"2026-07-10T19:10:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c4a3dc59-f3ef-4ffd-a24f-475827d0f93b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-33ca20.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-gMZblK2NMDebinMr_hwzN3iJx7fOXhD7UxHYGNHQbqcrIZPODAO3lIzsgPrI\"}"} {"level":"debug","ts":"2026-07-10T19:10:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c4a3dc59-f3ef-4ffd-a24f-475827d0f93b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-33ca20.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"fe7c3c96-5bd3-4be7-a58c-60027113dd45","keyName":"e2e-rate-a-b3f533","subscription":"e2e-rate-iso-a-b3f533","tenant":"e2e-shared-a-33ca20","userId":"fe7c3c96-5bd3-4be7-a58c-60027113dd45","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-10T19:10:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c4a3dc59-f3ef-4ffd-a24f-475827d0f93b","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-33ca20.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-33ca20/rate-test-model-33ca20\",\"requestedSubscription\":\"e2e-rate-iso-a-b3f533\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-10T19:10:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c4a3dc59-f3ef-4ffd-a24f-475827d0f93b","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-33ca20.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-33ca20","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b3f533","namespace":"ai-tenant-e2e-shared-a-33ca20","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-10T19:10:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c4a3dc59-f3ef-4ffd-a24f-475827d0f93b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T19:10:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c4a3dc59-f3ef-4ffd-a24f-475827d0f93b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T19:10:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c4a3dc59-f3ef-4ffd-a24f-475827d0f93b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T19:10:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c4a3dc59-f3ef-4ffd-a24f-475827d0f93b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-33ca20/rate-test-model-33ca20\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T19:10:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c4a3dc59-f3ef-4ffd-a24f-475827d0f93b","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T19:10:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c4a3dc59-f3ef-4ffd-a24f-475827d0f93b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-b3f533"} {"level":"debug","ts":"2026-07-10T19:10:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c4a3dc59-f3ef-4ffd-a24f-475827d0f93b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-10T19:10:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c4a3dc59-f3ef-4ffd-a24f-475827d0f93b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T19:10:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c4a3dc59-f3ef-4ffd-a24f-475827d0f93b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"fe7c3c96-5bd3-4be7-a58c-60027113dd45","keyName":"e2e-rate-a-b3f533","selected_subscription":"e2e-rate-iso-a-b3f533","selected_subscription_key":"ai-tenant-e2e-shared-a-33ca20/e2e-rate-iso-a-b3f533@ai-tenant-e2e-shared-a-33ca20/rate-test-model-33ca20","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-33ca20","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b3f533","namespace":"ai-tenant-e2e-shared-a-33ca20","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-10T19:10:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c4a3dc59-f3ef-4ffd-a24f-475827d0f93b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T19:10:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c4a3dc59-f3ef-4ffd-a24f-475827d0f93b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T19:10:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"acc4d197-07b8-4d9d-b9d5-4bd92b3bdb0f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.16:43692","PortSpecifier":{"PortValue":43692}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"acc4d197-07b8-4d9d-b9d5-4bd92b3bdb0f","method":"POST","path":"/ai-tenant-e2e-shared-a-33ca20/rate-test-model-33ca20/v1/completions","host":"e2e-shared-a-33ca20.apps.d363791c-37c4-4115-b4f0-e1034407046f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T19:10:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"acc4d197-07b8-4d9d-b9d5-4bd92b3bdb0f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.16:43692","PortSpecifier":{"PortValue":43692}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783710653,"nanos":772992853},"http":{"id":"acc4d197-07b8-4d9d-b9d5-4bd92b3bdb0f","method":"POST","headers":{":authority":"e2e-shared-a-33ca20.apps.d363791c-37c4-4115-b4f0-e1034407046f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-33ca20/rate-test-model-33ca20/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T19:10:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"acc4d197-07b8-4d9d-b9d5-4bd92b3bdb0f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-gMZblK2NMDebinMr_hwzN3iJx7fOXhD7UxHYGNHQbqcrIZPODAO3lIzsgPrI"} {"level":"debug","ts":"2026-07-10T19:10:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"acc4d197-07b8-4d9d-b9d5-4bd92b3bdb0f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-33ca20.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-gMZblK2NMDebinMr_hwzN3iJx7fOXhD7UxHYGNHQbqcrIZPODAO3lIzsgPrI\"}"} {"level":"debug","ts":"2026-07-10T19:10:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"acc4d197-07b8-4d9d-b9d5-4bd92b3bdb0f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-33ca20.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"fe7c3c96-5bd3-4be7-a58c-60027113dd45","keyName":"e2e-rate-a-b3f533","subscription":"e2e-rate-iso-a-b3f533","tenant":"e2e-shared-a-33ca20","userId":"fe7c3c96-5bd3-4be7-a58c-60027113dd45","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-10T19:10:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"acc4d197-07b8-4d9d-b9d5-4bd92b3bdb0f","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-33ca20.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-33ca20/rate-test-model-33ca20\",\"requestedSubscription\":\"e2e-rate-iso-a-b3f533\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-10T19:10:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"acc4d197-07b8-4d9d-b9d5-4bd92b3bdb0f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-33ca20.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-33ca20","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b3f533","namespace":"ai-tenant-e2e-shared-a-33ca20","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-10T19:10:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"acc4d197-07b8-4d9d-b9d5-4bd92b3bdb0f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T19:10:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"acc4d197-07b8-4d9d-b9d5-4bd92b3bdb0f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T19:10:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"acc4d197-07b8-4d9d-b9d5-4bd92b3bdb0f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-33ca20/rate-test-model-33ca20\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T19:10:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"acc4d197-07b8-4d9d-b9d5-4bd92b3bdb0f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T19:10:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"acc4d197-07b8-4d9d-b9d5-4bd92b3bdb0f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T19:10:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"acc4d197-07b8-4d9d-b9d5-4bd92b3bdb0f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T19:10:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"acc4d197-07b8-4d9d-b9d5-4bd92b3bdb0f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-b3f533"} {"level":"debug","ts":"2026-07-10T19:10:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"acc4d197-07b8-4d9d-b9d5-4bd92b3bdb0f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-10T19:10:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"acc4d197-07b8-4d9d-b9d5-4bd92b3bdb0f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"fe7c3c96-5bd3-4be7-a58c-60027113dd45","keyName":"e2e-rate-a-b3f533","selected_subscription":"e2e-rate-iso-a-b3f533","selected_subscription_key":"ai-tenant-e2e-shared-a-33ca20/e2e-rate-iso-a-b3f533@ai-tenant-e2e-shared-a-33ca20/rate-test-model-33ca20","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-33ca20","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b3f533","namespace":"ai-tenant-e2e-shared-a-33ca20","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-10T19:10:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"acc4d197-07b8-4d9d-b9d5-4bd92b3bdb0f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T19:10:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"acc4d197-07b8-4d9d-b9d5-4bd92b3bdb0f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T19:11:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"15c1ad50-f4c0-421f-b1cb-5a0ab8d6a747","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.16:42240","PortSpecifier":{"PortValue":42240}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"15c1ad50-f4c0-421f-b1cb-5a0ab8d6a747","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-33ca20.apps.d363791c-37c4-4115-b4f0-e1034407046f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T19:11:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"15c1ad50-f4c0-421f-b1cb-5a0ab8d6a747","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.16:42240","PortSpecifier":{"PortValue":42240}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783710666,"nanos":513737296},"http":{"id":"15c1ad50-f4c0-421f-b1cb-5a0ab8d6a747","method":"POST","headers":{":authority":"e2e-shared-a-33ca20.apps.d363791c-37c4-4115-b4f0-e1034407046f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T19:11:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"15c1ad50-f4c0-421f-b1cb-5a0ab8d6a747","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T19:11:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"15c1ad50-f4c0-421f-b1cb-5a0ab8d6a747","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6dd43bae-5856-4bf7-aa31-595588c0c7b9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f4bfb603-1d1c-4dfe-aa58-2bd1826c9b75"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e1034407046f"]}} {"level":"debug","ts":"2026-07-10T19:11:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"15c1ad50-f4c0-421f-b1cb-5a0ab8d6a747","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e1034407046f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f4bfb603-1d1c-4dfe-aa58-2bd1826c9b75"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6dd43bae-5856-4bf7-aa31-595588c0c7b9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"dfe8ef1a9af1a1204ec43304f443a5ef3a6e3fe57a18deb1e094e93f15b7548d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-33ca20.apps.d363791c-37c4-4115-b4f0-e1034407046f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T19:11:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"15c1ad50-f4c0-421f-b1cb-5a0ab8d6a747","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T19:11:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"15c1ad50-f4c0-421f-b1cb-5a0ab8d6a747","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T19:11:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"15c1ad50-f4c0-421f-b1cb-5a0ab8d6a747","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-33ca20/rate-test-model-33ca20\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T19:11:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"15c1ad50-f4c0-421f-b1cb-5a0ab8d6a747","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T19:11:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"15c1ad50-f4c0-421f-b1cb-5a0ab8d6a747","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-10T19:11:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"15c1ad50-f4c0-421f-b1cb-5a0ab8d6a747","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-10T19:11:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"15c1ad50-f4c0-421f-b1cb-5a0ab8d6a747","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T19:11:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"15c1ad50-f4c0-421f-b1cb-5a0ab8d6a747","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T19:11:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"72cbe3d7-8798-4910-abc5-3c8df4b6085c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.16:46172","PortSpecifier":{"PortValue":46172}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"72cbe3d7-8798-4910-abc5-3c8df4b6085c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-7b46a3.apps.d363791c-37c4-4115-b4f0-e1034407046f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T19:11:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"72cbe3d7-8798-4910-abc5-3c8df4b6085c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.16:46172","PortSpecifier":{"PortValue":46172}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783710666,"nanos":561312789},"http":{"id":"72cbe3d7-8798-4910-abc5-3c8df4b6085c","method":"POST","headers":{":authority":"e2e-shared-b-7b46a3.apps.d363791c-37c4-4115-b4f0-e1034407046f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T19:11:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"72cbe3d7-8798-4910-abc5-3c8df4b6085c","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T19:11:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"72cbe3d7-8798-4910-abc5-3c8df4b6085c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6dd43bae-5856-4bf7-aa31-595588c0c7b9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f4bfb603-1d1c-4dfe-aa58-2bd1826c9b75"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e1034407046f"]}} {"level":"debug","ts":"2026-07-10T19:11:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"72cbe3d7-8798-4910-abc5-3c8df4b6085c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e1034407046f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f4bfb603-1d1c-4dfe-aa58-2bd1826c9b75"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6dd43bae-5856-4bf7-aa31-595588c0c7b9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"35322e841f878a999b9fb319d53b4ede55fab1a3f4e612b55f96e99b3dae2210"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-7b46a3.apps.d363791c-37c4-4115-b4f0-e1034407046f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T19:11:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"72cbe3d7-8798-4910-abc5-3c8df4b6085c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T19:11:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"72cbe3d7-8798-4910-abc5-3c8df4b6085c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T19:11:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"72cbe3d7-8798-4910-abc5-3c8df4b6085c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-7b46a3/rate-test-model-7b46a3\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T19:11:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"72cbe3d7-8798-4910-abc5-3c8df4b6085c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T19:11:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"72cbe3d7-8798-4910-abc5-3c8df4b6085c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-10T19:11:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"72cbe3d7-8798-4910-abc5-3c8df4b6085c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-10T19:11:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"72cbe3d7-8798-4910-abc5-3c8df4b6085c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T19:11:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"72cbe3d7-8798-4910-abc5-3c8df4b6085c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T19:11:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d1d88360-523a-4bb8-bb66-5f0f91abf459","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.16:42256","PortSpecifier":{"PortValue":42256}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d1d88360-523a-4bb8-bb66-5f0f91abf459","method":"POST","path":"/ai-tenant-e2e-shared-a-33ca20/rate-test-model-33ca20/v1/completions","host":"e2e-shared-a-33ca20.apps.d363791c-37c4-4115-b4f0-e1034407046f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T19:11:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d1d88360-523a-4bb8-bb66-5f0f91abf459","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.16:42256","PortSpecifier":{"PortValue":42256}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783710666,"nanos":599472593},"http":{"id":"d1d88360-523a-4bb8-bb66-5f0f91abf459","method":"POST","headers":{":authority":"e2e-shared-a-33ca20.apps.d363791c-37c4-4115-b4f0-e1034407046f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-33ca20/rate-test-model-33ca20/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T19:11:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d1d88360-523a-4bb8-bb66-5f0f91abf459","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-hkXfk4G2Wk0l7F7_UDN4TGuDUgpAEaBSSlRKSmoVywWYsOemvVj72z9nimt"} {"level":"debug","ts":"2026-07-10T19:11:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d1d88360-523a-4bb8-bb66-5f0f91abf459","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-33ca20.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-hkXfk4G2Wk0l7F7_UDN4TGuDUgpAEaBSSlRKSmoVywWYsOemvVj72z9nimt\"}"} {"level":"debug","ts":"2026-07-10T19:11:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d1d88360-523a-4bb8-bb66-5f0f91abf459","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-33ca20.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"67529277-2f7e-43e6-838d-f86221148eb6","keyName":"e2e-rate-a-e182a3","subscription":"e2e-rate-iso-a-e182a3","tenant":"e2e-shared-a-33ca20","userId":"67529277-2f7e-43e6-838d-f86221148eb6","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-10T19:11:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d1d88360-523a-4bb8-bb66-5f0f91abf459","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-33ca20.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-33ca20/rate-test-model-33ca20\",\"requestedSubscription\":\"e2e-rate-iso-a-e182a3\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-10T19:11:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d1d88360-523a-4bb8-bb66-5f0f91abf459","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-33ca20.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-33ca20","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e182a3","namespace":"ai-tenant-e2e-shared-a-33ca20","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-10T19:11:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d1d88360-523a-4bb8-bb66-5f0f91abf459","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T19:11:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d1d88360-523a-4bb8-bb66-5f0f91abf459","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T19:11:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d1d88360-523a-4bb8-bb66-5f0f91abf459","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T19:11:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d1d88360-523a-4bb8-bb66-5f0f91abf459","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-33ca20/rate-test-model-33ca20\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T19:11:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d1d88360-523a-4bb8-bb66-5f0f91abf459","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T19:11:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d1d88360-523a-4bb8-bb66-5f0f91abf459","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T19:11:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d1d88360-523a-4bb8-bb66-5f0f91abf459","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e182a3"} {"level":"debug","ts":"2026-07-10T19:11:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d1d88360-523a-4bb8-bb66-5f0f91abf459","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-10T19:11:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d1d88360-523a-4bb8-bb66-5f0f91abf459","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"67529277-2f7e-43e6-838d-f86221148eb6","keyName":"e2e-rate-a-e182a3","selected_subscription":"e2e-rate-iso-a-e182a3","selected_subscription_key":"ai-tenant-e2e-shared-a-33ca20/e2e-rate-iso-a-e182a3@ai-tenant-e2e-shared-a-33ca20/rate-test-model-33ca20","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-33ca20","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e182a3","namespace":"ai-tenant-e2e-shared-a-33ca20","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-10T19:11:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d1d88360-523a-4bb8-bb66-5f0f91abf459","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T19:11:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d1d88360-523a-4bb8-bb66-5f0f91abf459","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T19:11:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7cf5b376-cf99-41c8-9148-8776b2cd16fe","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.16:42260","PortSpecifier":{"PortValue":42260}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7cf5b376-cf99-41c8-9148-8776b2cd16fe","method":"POST","path":"/ai-tenant-e2e-shared-a-33ca20/rate-test-model-33ca20/v1/completions","host":"e2e-shared-a-33ca20.apps.d363791c-37c4-4115-b4f0-e1034407046f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T19:11:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7cf5b376-cf99-41c8-9148-8776b2cd16fe","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.16:42260","PortSpecifier":{"PortValue":42260}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783710667,"nanos":635611815},"http":{"id":"7cf5b376-cf99-41c8-9148-8776b2cd16fe","method":"POST","headers":{":authority":"e2e-shared-a-33ca20.apps.d363791c-37c4-4115-b4f0-e1034407046f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-33ca20/rate-test-model-33ca20/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T19:11:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7cf5b376-cf99-41c8-9148-8776b2cd16fe","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-hkXfk4G2Wk0l7F7_UDN4TGuDUgpAEaBSSlRKSmoVywWYsOemvVj72z9nimt"} {"level":"debug","ts":"2026-07-10T19:11:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7cf5b376-cf99-41c8-9148-8776b2cd16fe","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-33ca20.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-hkXfk4G2Wk0l7F7_UDN4TGuDUgpAEaBSSlRKSmoVywWYsOemvVj72z9nimt\"}"} {"level":"debug","ts":"2026-07-10T19:11:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7cf5b376-cf99-41c8-9148-8776b2cd16fe","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-33ca20.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"67529277-2f7e-43e6-838d-f86221148eb6","keyName":"e2e-rate-a-e182a3","subscription":"e2e-rate-iso-a-e182a3","tenant":"e2e-shared-a-33ca20","userId":"67529277-2f7e-43e6-838d-f86221148eb6","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-10T19:11:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7cf5b376-cf99-41c8-9148-8776b2cd16fe","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-33ca20.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-33ca20/rate-test-model-33ca20\",\"requestedSubscription\":\"e2e-rate-iso-a-e182a3\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-10T19:11:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7cf5b376-cf99-41c8-9148-8776b2cd16fe","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-33ca20.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-33ca20","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e182a3","namespace":"ai-tenant-e2e-shared-a-33ca20","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-10T19:11:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7cf5b376-cf99-41c8-9148-8776b2cd16fe","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T19:11:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7cf5b376-cf99-41c8-9148-8776b2cd16fe","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T19:11:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7cf5b376-cf99-41c8-9148-8776b2cd16fe","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T19:11:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7cf5b376-cf99-41c8-9148-8776b2cd16fe","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-33ca20/rate-test-model-33ca20\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T19:11:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7cf5b376-cf99-41c8-9148-8776b2cd16fe","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T19:11:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7cf5b376-cf99-41c8-9148-8776b2cd16fe","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e182a3"} {"level":"debug","ts":"2026-07-10T19:11:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7cf5b376-cf99-41c8-9148-8776b2cd16fe","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T19:11:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7cf5b376-cf99-41c8-9148-8776b2cd16fe","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-10T19:11:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7cf5b376-cf99-41c8-9148-8776b2cd16fe","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"67529277-2f7e-43e6-838d-f86221148eb6","keyName":"e2e-rate-a-e182a3","selected_subscription":"e2e-rate-iso-a-e182a3","selected_subscription_key":"ai-tenant-e2e-shared-a-33ca20/e2e-rate-iso-a-e182a3@ai-tenant-e2e-shared-a-33ca20/rate-test-model-33ca20","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-33ca20","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e182a3","namespace":"ai-tenant-e2e-shared-a-33ca20","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-10T19:11:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7cf5b376-cf99-41c8-9148-8776b2cd16fe","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T19:11:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7cf5b376-cf99-41c8-9148-8776b2cd16fe","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T19:11:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"98b99546-80c6-4d90-b9b7-cd9bf3a00dd2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.16:34010","PortSpecifier":{"PortValue":34010}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"98b99546-80c6-4d90-b9b7-cd9bf3a00dd2","method":"POST","path":"/ai-tenant-e2e-shared-a-33ca20/rate-test-model-33ca20/v1/completions","host":"e2e-shared-a-33ca20.apps.d363791c-37c4-4115-b4f0-e1034407046f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T19:11:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"98b99546-80c6-4d90-b9b7-cd9bf3a00dd2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.16:34010","PortSpecifier":{"PortValue":34010}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783710668,"nanos":672383928},"http":{"id":"98b99546-80c6-4d90-b9b7-cd9bf3a00dd2","method":"POST","headers":{":authority":"e2e-shared-a-33ca20.apps.d363791c-37c4-4115-b4f0-e1034407046f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-33ca20/rate-test-model-33ca20/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T19:11:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"98b99546-80c6-4d90-b9b7-cd9bf3a00dd2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-hkXfk4G2Wk0l7F7_UDN4TGuDUgpAEaBSSlRKSmoVywWYsOemvVj72z9nimt"} {"level":"debug","ts":"2026-07-10T19:11:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"98b99546-80c6-4d90-b9b7-cd9bf3a00dd2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-33ca20.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-hkXfk4G2Wk0l7F7_UDN4TGuDUgpAEaBSSlRKSmoVywWYsOemvVj72z9nimt\"}"} {"level":"debug","ts":"2026-07-10T19:11:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"98b99546-80c6-4d90-b9b7-cd9bf3a00dd2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-33ca20.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"67529277-2f7e-43e6-838d-f86221148eb6","keyName":"e2e-rate-a-e182a3","subscription":"e2e-rate-iso-a-e182a3","tenant":"e2e-shared-a-33ca20","userId":"67529277-2f7e-43e6-838d-f86221148eb6","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-10T19:11:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"98b99546-80c6-4d90-b9b7-cd9bf3a00dd2","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-33ca20.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-33ca20/rate-test-model-33ca20\",\"requestedSubscription\":\"e2e-rate-iso-a-e182a3\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-10T19:11:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"98b99546-80c6-4d90-b9b7-cd9bf3a00dd2","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-33ca20.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-33ca20","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e182a3","namespace":"ai-tenant-e2e-shared-a-33ca20","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-10T19:11:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"98b99546-80c6-4d90-b9b7-cd9bf3a00dd2","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T19:11:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"98b99546-80c6-4d90-b9b7-cd9bf3a00dd2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T19:11:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"98b99546-80c6-4d90-b9b7-cd9bf3a00dd2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T19:11:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"98b99546-80c6-4d90-b9b7-cd9bf3a00dd2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-33ca20/rate-test-model-33ca20\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T19:11:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"98b99546-80c6-4d90-b9b7-cd9bf3a00dd2","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T19:11:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"98b99546-80c6-4d90-b9b7-cd9bf3a00dd2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e182a3"} {"level":"debug","ts":"2026-07-10T19:11:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"98b99546-80c6-4d90-b9b7-cd9bf3a00dd2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-10T19:11:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"98b99546-80c6-4d90-b9b7-cd9bf3a00dd2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T19:11:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"98b99546-80c6-4d90-b9b7-cd9bf3a00dd2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"67529277-2f7e-43e6-838d-f86221148eb6","keyName":"e2e-rate-a-e182a3","selected_subscription":"e2e-rate-iso-a-e182a3","selected_subscription_key":"ai-tenant-e2e-shared-a-33ca20/e2e-rate-iso-a-e182a3@ai-tenant-e2e-shared-a-33ca20/rate-test-model-33ca20","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-33ca20","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e182a3","namespace":"ai-tenant-e2e-shared-a-33ca20","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-10T19:11:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"98b99546-80c6-4d90-b9b7-cd9bf3a00dd2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T19:11:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"98b99546-80c6-4d90-b9b7-cd9bf3a00dd2","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T19:11:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"21d35942-b366-44af-b93d-498055c30c7b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.16:54688","PortSpecifier":{"PortValue":54688}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"21d35942-b366-44af-b93d-498055c30c7b","method":"POST","path":"/ai-tenant-e2e-shared-b-7b46a3/rate-test-model-7b46a3/v1/completions","host":"e2e-shared-b-7b46a3.apps.d363791c-37c4-4115-b4f0-e1034407046f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T19:11:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"21d35942-b366-44af-b93d-498055c30c7b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.16:54688","PortSpecifier":{"PortValue":54688}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783710668,"nanos":707931960},"http":{"id":"21d35942-b366-44af-b93d-498055c30c7b","method":"POST","headers":{":authority":"e2e-shared-b-7b46a3.apps.d363791c-37c4-4115-b4f0-e1034407046f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-7b46a3/rate-test-model-7b46a3/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T19:11:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"21d35942-b366-44af-b93d-498055c30c7b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1ax1UZTuv9z8OvwmC_Lc6p9GYgMXYcW2D1Uah181GaT5QH8UHqZglzaPBLY3I"} {"level":"debug","ts":"2026-07-10T19:11:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"21d35942-b366-44af-b93d-498055c30c7b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-7b46a3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1ax1UZTuv9z8OvwmC_Lc6p9GYgMXYcW2D1Uah181GaT5QH8UHqZglzaPBLY3I\"}"} {"level":"debug","ts":"2026-07-10T19:11:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"21d35942-b366-44af-b93d-498055c30c7b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-7b46a3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5588e042-d593-4131-8603-8659de5ed141","keyName":"e2e-rate-b-e182a3","subscription":"e2e-rate-iso-b-e182a3","tenant":"e2e-shared-b-7b46a3","userId":"5588e042-d593-4131-8603-8659de5ed141","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-10T19:11:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"21d35942-b366-44af-b93d-498055c30c7b","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-7b46a3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-7b46a3/rate-test-model-7b46a3\",\"requestedSubscription\":\"e2e-rate-iso-b-e182a3\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-10T19:11:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"21d35942-b366-44af-b93d-498055c30c7b","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-7b46a3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-7b46a3","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-e182a3","namespace":"ai-tenant-e2e-shared-b-7b46a3","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-10T19:11:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"21d35942-b366-44af-b93d-498055c30c7b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T19:11:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"21d35942-b366-44af-b93d-498055c30c7b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T19:11:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"21d35942-b366-44af-b93d-498055c30c7b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T19:11:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"21d35942-b366-44af-b93d-498055c30c7b","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T19:11:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"21d35942-b366-44af-b93d-498055c30c7b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-7b46a3/rate-test-model-7b46a3\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T19:11:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"21d35942-b366-44af-b93d-498055c30c7b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T19:11:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"21d35942-b366-44af-b93d-498055c30c7b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-10T19:11:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"21d35942-b366-44af-b93d-498055c30c7b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-e182a3"} {"level":"debug","ts":"2026-07-10T19:11:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"21d35942-b366-44af-b93d-498055c30c7b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"5588e042-d593-4131-8603-8659de5ed141","keyName":"e2e-rate-b-e182a3","selected_subscription":"e2e-rate-iso-b-e182a3","selected_subscription_key":"ai-tenant-e2e-shared-b-7b46a3/e2e-rate-iso-b-e182a3@ai-tenant-e2e-shared-b-7b46a3/rate-test-model-7b46a3","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-7b46a3","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-e182a3","namespace":"ai-tenant-e2e-shared-b-7b46a3","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-10T19:11:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"21d35942-b366-44af-b93d-498055c30c7b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T19:11:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"21d35942-b366-44af-b93d-498055c30c7b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T19:11:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f465663dc4b6fda45345797d2e2a55840bfcab883d7330847dd33730c74a78a4"} {"level":"info","ts":"2026-07-10T19:11:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a3c5313f1f2921b164df59a0db68e3323d7059fc1916e8c7ba36fc082ae8dbcc"} {"level":"info","ts":"2026-07-10T19:11:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/46264fcc3a582f4da0ee410ae463acae3b5a7d237d341d06aff9842310a2f27b"} {"level":"info","ts":"2026-07-10T19:11:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a76f1e5a6b6f8996a1a78221fc605784438fe1d51850e8e713f3c457149ff52d"} {"level":"info","ts":"2026-07-10T19:11:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5a06b954b9a7233dff4a103bc042598cc9573a009f01e787220210413d558aea"} {"level":"info","ts":"2026-07-10T19:11:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bfd941dbe8baef1eb9c088d6b45888b5cb6f5211b352a86fe0856dec10522550"} {"level":"info","ts":"2026-07-10T19:11:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d629d8513fecbbd26b8943dbfa5a2c669177bf3896794f1a5ecf18abd87bb5a8"} {"level":"info","ts":"2026-07-10T19:11:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0298d6954ca4fe78ea370e49effffb5e965309c80dd8061a91bd26753e06fc10"} {"level":"info","ts":"2026-07-10T19:11:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/70ceca67ac86490f2eeede597aca67150da2adb513301b9f53d40dcc1276de47"} {"level":"info","ts":"2026-07-10T19:11:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9d4190739a24e27a042ad3cbbb6590ff77c32fe76e24ce647e00f8d625d892fd"} {"level":"info","ts":"2026-07-10T19:11:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dec1d67e33a7404112d76b421ddb160f51b7f51687037bb2eec5063d3dccfd70"} {"level":"info","ts":"2026-07-10T19:11:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a4595aff0d2db467174b2ca7a1409608fa67389278dcd87a00aa9ed178579532"} {"level":"info","ts":"2026-07-10T19:11:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4aca2234adc63a294a9b6e4b7200404d711d89bdd0c812118ea1adf73d5e53cd"} {"level":"info","ts":"2026-07-10T19:11:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3e519c81932687124c79c40aa5d23a5c4ac24c2fca8a62ffbd79239cd7d27731"} {"level":"info","ts":"2026-07-10T19:11:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7d6ed36849896a7f248ac92340bdc53cfcdb1cb72a30e1faa8912dd5ef2bd414"} {"level":"info","ts":"2026-07-10T19:11:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d7dab56c8b67edfb4ee11a943a0df0c0a466dd4cfd2dafe594ac6127780a5968"} {"level":"info","ts":"2026-07-10T19:11:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eace3bb039c229aa713a42c97b5feaf6bcf93778910a0dcae5888dc35d67d31c"} {"level":"info","ts":"2026-07-10T19:11:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bd6c442a3165f1d1b0f79742711ab07fbeea4c8c529f1e2c8033d8956080c15c"} {"level":"info","ts":"2026-07-10T19:11:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/003e8f7c9ad8f092e2a79ab25d6edd6d29cbd83f7a7432532f05bd22de2de6cf"} {"level":"info","ts":"2026-07-10T19:11:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dfe8ef1a9af1a1204ec43304f443a5ef3a6e3fe57a18deb1e094e93f15b7548d"} {"level":"info","ts":"2026-07-10T19:11:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b9bfc637a6a83c4b194839158e6f3a76e6ce779f29d8f75bf264072efa3261de"} {"level":"info","ts":"2026-07-10T19:11:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/36926324f558b8d47d838eb68bef8b32ac3885019930684ae92ea57eb447255f"} {"level":"info","ts":"2026-07-10T19:11:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/37c2aac016442a0ea3af875455f9636f9678e55ab49194e7078ff69a97fcb0ee"} {"level":"info","ts":"2026-07-10T19:11:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/35322e841f878a999b9fb319d53b4ede55fab1a3f4e612b55f96e99b3dae2210"}