--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) --- {"level":"debug","ts":"2026-07-14T16:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31ae94497f18583ea89ba3e064ef4f91d592df63d9300e7dfdc727a2503e8130","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31ae94497f18583ea89ba3e064ef4f91d592df63d9300e7dfdc727a2503e8130"} {"level":"debug","ts":"2026-07-14T16:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ed772a3939e080d7836d6368cecfdfc4a72451afd1843839c8202bcd30be9a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:03:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:03:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ed772a3939e080d7836d6368cecfdfc4a72451afd1843839c8202bcd30be9a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ed772a3939e080d7836d6368cecfdfc4a72451afd1843839c8202bcd30be9a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:03:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:03:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ed772a3939e080d7836d6368cecfdfc4a72451afd1843839c8202bcd30be9a2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ed772a3939e080d7836d6368cecfdfc4a72451afd1843839c8202bcd30be9a2"} {"level":"debug","ts":"2026-07-14T16:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ed772a3939e080d7836d6368cecfdfc4a72451afd1843839c8202bcd30be9a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:03:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:03:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-14T16:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6ed772a3939e080d7836d6368cecfdfc4a72451afd1843839c8202bcd30be9a2","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6ed772a3939e080d7836d6368cecfdfc4a72451afd1843839c8202bcd30be9a2\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T16:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ed772a3939e080d7836d6368cecfdfc4a72451afd1843839c8202bcd30be9a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ed772a3939e080d7836d6368cecfdfc4a72451afd1843839c8202bcd30be9a2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ed772a3939e080d7836d6368cecfdfc4a72451afd1843839c8202bcd30be9a2"} {"level":"info","ts":"2026-07-14T16:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ed772a3939e080d7836d6368cecfdfc4a72451afd1843839c8202bcd30be9a2"} {"level":"debug","ts":"2026-07-14T16:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"710c3e70a5056028bb90709ceacf988578393f425c9e262a992caa7314bbb0e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:03:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:03:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"710c3e70a5056028bb90709ceacf988578393f425c9e262a992caa7314bbb0e8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"710c3e70a5056028bb90709ceacf988578393f425c9e262a992caa7314bbb0e8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"710c3e70a5056028bb90709ceacf988578393f425c9e262a992caa7314bbb0e8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ed772a3939e080d7836d6368cecfdfc4a72451afd1843839c8202bcd30be9a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:03:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:03:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ed772a3939e080d7836d6368cecfdfc4a72451afd1843839c8202bcd30be9a2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/710c3e70a5056028bb90709ceacf988578393f425c9e262a992caa7314bbb0e8"} {"level":"info","ts":"2026-07-14T16:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ed772a3939e080d7836d6368cecfdfc4a72451afd1843839c8202bcd30be9a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ed772a3939e080d7836d6368cecfdfc4a72451afd1843839c8202bcd30be9a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"710c3e70a5056028bb90709ceacf988578393f425c9e262a992caa7314bbb0e8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/710c3e70a5056028bb90709ceacf988578393f425c9e262a992caa7314bbb0e8"} {"level":"info","ts":"2026-07-14T16:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ed772a3939e080d7836d6368cecfdfc4a72451afd1843839c8202bcd30be9a2"} {"level":"debug","ts":"2026-07-14T16:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"710c3e70a5056028bb90709ceacf988578393f425c9e262a992caa7314bbb0e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:03:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:03:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["710c3e70a5056028bb90709ceacf988578393f425c9e262a992caa7314bbb0e8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"710c3e70a5056028bb90709ceacf988578393f425c9e262a992caa7314bbb0e8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"710c3e70a5056028bb90709ceacf988578393f425c9e262a992caa7314bbb0e8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11c3b7e29b576a41e55a25f17f5c56fe605906f10e9f6ff331a8eb6f574a6e45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:03:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:03:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11c3b7e29b576a41e55a25f17f5c56fe605906f10e9f6ff331a8eb6f574a6e45","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11c3b7e29b576a41e55a25f17f5c56fe605906f10e9f6ff331a8eb6f574a6e45","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11c3b7e29b576a41e55a25f17f5c56fe605906f10e9f6ff331a8eb6f574a6e45","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/710c3e70a5056028bb90709ceacf988578393f425c9e262a992caa7314bbb0e8"} {"level":"debug","ts":"2026-07-14T16:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11c3b7e29b576a41e55a25f17f5c56fe605906f10e9f6ff331a8eb6f574a6e45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:03:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:03:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11c3b7e29b576a41e55a25f17f5c56fe605906f10e9f6ff331a8eb6f574a6e45"} {"level":"info","ts":"2026-07-14T16:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11c3b7e29b576a41e55a25f17f5c56fe605906f10e9f6ff331a8eb6f574a6e45","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11c3b7e29b576a41e55a25f17f5c56fe605906f10e9f6ff331a8eb6f574a6e45","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11c3b7e29b576a41e55a25f17f5c56fe605906f10e9f6ff331a8eb6f574a6e45"} {"level":"debug","ts":"2026-07-14T16:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11c3b7e29b576a41e55a25f17f5c56fe605906f10e9f6ff331a8eb6f574a6e45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:03:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:03:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["11c3b7e29b576a41e55a25f17f5c56fe605906f10e9f6ff331a8eb6f574a6e45"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11c3b7e29b576a41e55a25f17f5c56fe605906f10e9f6ff331a8eb6f574a6e45","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78cf544cc3af549b4d067d80bf3c4b030553ca9b28afeef15b07706627b15925","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:03:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:03:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78cf544cc3af549b4d067d80bf3c4b030553ca9b28afeef15b07706627b15925","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11c3b7e29b576a41e55a25f17f5c56fe605906f10e9f6ff331a8eb6f574a6e45","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78cf544cc3af549b4d067d80bf3c4b030553ca9b28afeef15b07706627b15925","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78cf544cc3af549b4d067d80bf3c4b030553ca9b28afeef15b07706627b15925","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78cf544cc3af549b4d067d80bf3c4b030553ca9b28afeef15b07706627b15925"} {"level":"debug","ts":"2026-07-14T16:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78cf544cc3af549b4d067d80bf3c4b030553ca9b28afeef15b07706627b15925","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:03:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:03:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["78cf544cc3af549b4d067d80bf3c4b030553ca9b28afeef15b07706627b15925"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11c3b7e29b576a41e55a25f17f5c56fe605906f10e9f6ff331a8eb6f574a6e45"} {"level":"info","ts":"2026-07-14T16:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78cf544cc3af549b4d067d80bf3c4b030553ca9b28afeef15b07706627b15925","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78cf544cc3af549b4d067d80bf3c4b030553ca9b28afeef15b07706627b15925","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:03:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:03:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78cf544cc3af549b4d067d80bf3c4b030553ca9b28afeef15b07706627b15925","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78cf544cc3af549b4d067d80bf3c4b030553ca9b28afeef15b07706627b15925","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78cf544cc3af549b4d067d80bf3c4b030553ca9b28afeef15b07706627b15925","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78cf544cc3af549b4d067d80bf3c4b030553ca9b28afeef15b07706627b15925"} {"level":"debug","ts":"2026-07-14T16:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78cf544cc3af549b4d067d80bf3c4b030553ca9b28afeef15b07706627b15925","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed2d4dd5e02d2c7ac430be91b5fb2c98203725f80eeecfc6f84759433294adac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:03:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:03:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78cf544cc3af549b4d067d80bf3c4b030553ca9b28afeef15b07706627b15925"} {"level":"info","ts":"2026-07-14T16:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed2d4dd5e02d2c7ac430be91b5fb2c98203725f80eeecfc6f84759433294adac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed2d4dd5e02d2c7ac430be91b5fb2c98203725f80eeecfc6f84759433294adac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:03:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:03:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed2d4dd5e02d2c7ac430be91b5fb2c98203725f80eeecfc6f84759433294adac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c2bb13c2dd3e1c51a69db9c88375f062d67de98a5ead5f01c5d00c0dab0c3c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:03:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:03:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed2d4dd5e02d2c7ac430be91b5fb2c98203725f80eeecfc6f84759433294adac"} {"level":"info","ts":"2026-07-14T16:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c2bb13c2dd3e1c51a69db9c88375f062d67de98a5ead5f01c5d00c0dab0c3c7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed2d4dd5e02d2c7ac430be91b5fb2c98203725f80eeecfc6f84759433294adac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:03:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:03:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ed2d4dd5e02d2c7ac430be91b5fb2c98203725f80eeecfc6f84759433294adac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed2d4dd5e02d2c7ac430be91b5fb2c98203725f80eeecfc6f84759433294adac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78cf544cc3af549b4d067d80bf3c4b030553ca9b28afeef15b07706627b15925","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:03:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:03:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["78cf544cc3af549b4d067d80bf3c4b030553ca9b28afeef15b07706627b15925"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c2bb13c2dd3e1c51a69db9c88375f062d67de98a5ead5f01c5d00c0dab0c3c7"} {"level":"info","ts":"2026-07-14T16:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78cf544cc3af549b4d067d80bf3c4b030553ca9b28afeef15b07706627b15925","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c2bb13c2dd3e1c51a69db9c88375f062d67de98a5ead5f01c5d00c0dab0c3c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:03:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:03:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2c2bb13c2dd3e1c51a69db9c88375f062d67de98a5ead5f01c5d00c0dab0c3c7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c2bb13c2dd3e1c51a69db9c88375f062d67de98a5ead5f01c5d00c0dab0c3c7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed2d4dd5e02d2c7ac430be91b5fb2c98203725f80eeecfc6f84759433294adac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:03:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:03:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed2d4dd5e02d2c7ac430be91b5fb2c98203725f80eeecfc6f84759433294adac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78cf544cc3af549b4d067d80bf3c4b030553ca9b28afeef15b07706627b15925","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c2bb13c2dd3e1c51a69db9c88375f062d67de98a5ead5f01c5d00c0dab0c3c7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed2d4dd5e02d2c7ac430be91b5fb2c98203725f80eeecfc6f84759433294adac","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed2d4dd5e02d2c7ac430be91b5fb2c98203725f80eeecfc6f84759433294adac"} {"level":"debug","ts":"2026-07-14T16:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed2d4dd5e02d2c7ac430be91b5fb2c98203725f80eeecfc6f84759433294adac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:03:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:03:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ed2d4dd5e02d2c7ac430be91b5fb2c98203725f80eeecfc6f84759433294adac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed2d4dd5e02d2c7ac430be91b5fb2c98203725f80eeecfc6f84759433294adac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5001688617a116aff11cd4890bb65dfc5d06123633e0f5f54fe1fb8eea0e2b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:03:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:03:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5001688617a116aff11cd4890bb65dfc5d06123633e0f5f54fe1fb8eea0e2b4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed2d4dd5e02d2c7ac430be91b5fb2c98203725f80eeecfc6f84759433294adac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5001688617a116aff11cd4890bb65dfc5d06123633e0f5f54fe1fb8eea0e2b4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c2bb13c2dd3e1c51a69db9c88375f062d67de98a5ead5f01c5d00c0dab0c3c7"} {"level":"debug","ts":"2026-07-14T16:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5001688617a116aff11cd4890bb65dfc5d06123633e0f5f54fe1fb8eea0e2b4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5001688617a116aff11cd4890bb65dfc5d06123633e0f5f54fe1fb8eea0e2b4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78cf544cc3af549b4d067d80bf3c4b030553ca9b28afeef15b07706627b15925"} {"level":"info","ts":"2026-07-14T16:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed2d4dd5e02d2c7ac430be91b5fb2c98203725f80eeecfc6f84759433294adac"} {"level":"debug","ts":"2026-07-14T16:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5001688617a116aff11cd4890bb65dfc5d06123633e0f5f54fe1fb8eea0e2b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:03:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:03:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5001688617a116aff11cd4890bb65dfc5d06123633e0f5f54fe1fb8eea0e2b4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5001688617a116aff11cd4890bb65dfc5d06123633e0f5f54fe1fb8eea0e2b4"} {"level":"debug","ts":"2026-07-14T16:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5001688617a116aff11cd4890bb65dfc5d06123633e0f5f54fe1fb8eea0e2b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:03:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:03:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5001688617a116aff11cd4890bb65dfc5d06123633e0f5f54fe1fb8eea0e2b4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5001688617a116aff11cd4890bb65dfc5d06123633e0f5f54fe1fb8eea0e2b4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fae925f4db1097302e97024b82c55d079dcbf4e8e12d645327562e911a81092b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:03:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:03:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fae925f4db1097302e97024b82c55d079dcbf4e8e12d645327562e911a81092b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5001688617a116aff11cd4890bb65dfc5d06123633e0f5f54fe1fb8eea0e2b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:03:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:03:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5001688617a116aff11cd4890bb65dfc5d06123633e0f5f54fe1fb8eea0e2b4"} {"level":"info","ts":"2026-07-14T16:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5001688617a116aff11cd4890bb65dfc5d06123633e0f5f54fe1fb8eea0e2b4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6aba9f1a2681b8534c96e6fda16fc27e13f5b4a0e3598e1d1285791bd10dc126","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:03:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:03:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6aba9f1a2681b8534c96e6fda16fc27e13f5b4a0e3598e1d1285791bd10dc126","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fae925f4db1097302e97024b82c55d079dcbf4e8e12d645327562e911a81092b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:03:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:03:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fae925f4db1097302e97024b82c55d079dcbf4e8e12d645327562e911a81092b"} {"level":"info","ts":"2026-07-14T16:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fae925f4db1097302e97024b82c55d079dcbf4e8e12d645327562e911a81092b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac49043e0d7c228136f5a3b6510a0e141f633e98cadf5d37e23a4a49fe633fad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:03:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:03:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac49043e0d7c228136f5a3b6510a0e141f633e98cadf5d37e23a4a49fe633fad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5001688617a116aff11cd4890bb65dfc5d06123633e0f5f54fe1fb8eea0e2b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:03:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:03:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5001688617a116aff11cd4890bb65dfc5d06123633e0f5f54fe1fb8eea0e2b4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6aba9f1a2681b8534c96e6fda16fc27e13f5b4a0e3598e1d1285791bd10dc126"} {"level":"info","ts":"2026-07-14T16:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5001688617a116aff11cd4890bb65dfc5d06123633e0f5f54fe1fb8eea0e2b4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc57175700ab457fddd972f579c87c640cdf2a48ca10c986490fc4e1ac1e4c7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:03:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:03:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc57175700ab457fddd972f579c87c640cdf2a48ca10c986490fc4e1ac1e4c7f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6aba9f1a2681b8534c96e6fda16fc27e13f5b4a0e3598e1d1285791bd10dc126","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:03:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:03:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6aba9f1a2681b8534c96e6fda16fc27e13f5b4a0e3598e1d1285791bd10dc126"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac49043e0d7c228136f5a3b6510a0e141f633e98cadf5d37e23a4a49fe633fad"} {"level":"info","ts":"2026-07-14T16:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6aba9f1a2681b8534c96e6fda16fc27e13f5b4a0e3598e1d1285791bd10dc126","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fae925f4db1097302e97024b82c55d079dcbf4e8e12d645327562e911a81092b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:03:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:03:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fae925f4db1097302e97024b82c55d079dcbf4e8e12d645327562e911a81092b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fae925f4db1097302e97024b82c55d079dcbf4e8e12d645327562e911a81092b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac49043e0d7c228136f5a3b6510a0e141f633e98cadf5d37e23a4a49fe633fad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:03:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:03:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ac49043e0d7c228136f5a3b6510a0e141f633e98cadf5d37e23a4a49fe633fad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5001688617a116aff11cd4890bb65dfc5d06123633e0f5f54fe1fb8eea0e2b4"} {"level":"info","ts":"2026-07-14T16:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac49043e0d7c228136f5a3b6510a0e141f633e98cadf5d37e23a4a49fe633fad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5001688617a116aff11cd4890bb65dfc5d06123633e0f5f54fe1fb8eea0e2b4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc57175700ab457fddd972f579c87c640cdf2a48ca10c986490fc4e1ac1e4c7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:03:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:03:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc57175700ab457fddd972f579c87c640cdf2a48ca10c986490fc4e1ac1e4c7f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6aba9f1a2681b8534c96e6fda16fc27e13f5b4a0e3598e1d1285791bd10dc126","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fae925f4db1097302e97024b82c55d079dcbf4e8e12d645327562e911a81092b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac49043e0d7c228136f5a3b6510a0e141f633e98cadf5d37e23a4a49fe633fad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc57175700ab457fddd972f579c87c640cdf2a48ca10c986490fc4e1ac1e4c7f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc57175700ab457fddd972f579c87c640cdf2a48ca10c986490fc4e1ac1e4c7f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc57175700ab457fddd972f579c87c640cdf2a48ca10c986490fc4e1ac1e4c7f"} {"level":"debug","ts":"2026-07-14T16:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc57175700ab457fddd972f579c87c640cdf2a48ca10c986490fc4e1ac1e4c7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:03:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:03:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dc57175700ab457fddd972f579c87c640cdf2a48ca10c986490fc4e1ac1e4c7f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc57175700ab457fddd972f579c87c640cdf2a48ca10c986490fc4e1ac1e4c7f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc57175700ab457fddd972f579c87c640cdf2a48ca10c986490fc4e1ac1e4c7f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fae925f4db1097302e97024b82c55d079dcbf4e8e12d645327562e911a81092b"} {"level":"info","ts":"2026-07-14T16:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6aba9f1a2681b8534c96e6fda16fc27e13f5b4a0e3598e1d1285791bd10dc126"} {"level":"info","ts":"2026-07-14T16:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac49043e0d7c228136f5a3b6510a0e141f633e98cadf5d37e23a4a49fe633fad"} {"level":"info","ts":"2026-07-14T16:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc57175700ab457fddd972f579c87c640cdf2a48ca10c986490fc4e1ac1e4c7f"} {"level":"debug","ts":"2026-07-14T16:03:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bca8a52cc0a70f356ddfd0bb90f5ad52a8547b7acaa9dec3745429cc7b1d89bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:03:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:03:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:03:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bca8a52cc0a70f356ddfd0bb90f5ad52a8547b7acaa9dec3745429cc7b1d89bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bca8a52cc0a70f356ddfd0bb90f5ad52a8547b7acaa9dec3745429cc7b1d89bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bca8a52cc0a70f356ddfd0bb90f5ad52a8547b7acaa9dec3745429cc7b1d89bf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:03:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bca8a52cc0a70f356ddfd0bb90f5ad52a8547b7acaa9dec3745429cc7b1d89bf"} {"level":"debug","ts":"2026-07-14T16:03:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bca8a52cc0a70f356ddfd0bb90f5ad52a8547b7acaa9dec3745429cc7b1d89bf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:03:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bca8a52cc0a70f356ddfd0bb90f5ad52a8547b7acaa9dec3745429cc7b1d89bf"} {"level":"debug","ts":"2026-07-14T16:03:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bca8a52cc0a70f356ddfd0bb90f5ad52a8547b7acaa9dec3745429cc7b1d89bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:03:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:03:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bca8a52cc0a70f356ddfd0bb90f5ad52a8547b7acaa9dec3745429cc7b1d89bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:03:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bca8a52cc0a70f356ddfd0bb90f5ad52a8547b7acaa9dec3745429cc7b1d89bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bca8a52cc0a70f356ddfd0bb90f5ad52a8547b7acaa9dec3745429cc7b1d89bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:03:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:03:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:03:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bca8a52cc0a70f356ddfd0bb90f5ad52a8547b7acaa9dec3745429cc7b1d89bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bca8a52cc0a70f356ddfd0bb90f5ad52a8547b7acaa9dec3745429cc7b1d89bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bca8a52cc0a70f356ddfd0bb90f5ad52a8547b7acaa9dec3745429cc7b1d89bf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:03:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bca8a52cc0a70f356ddfd0bb90f5ad52a8547b7acaa9dec3745429cc7b1d89bf"} {"level":"debug","ts":"2026-07-14T16:03:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bca8a52cc0a70f356ddfd0bb90f5ad52a8547b7acaa9dec3745429cc7b1d89bf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:03:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bca8a52cc0a70f356ddfd0bb90f5ad52a8547b7acaa9dec3745429cc7b1d89bf"} {"level":"debug","ts":"2026-07-14T16:03:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bca8a52cc0a70f356ddfd0bb90f5ad52a8547b7acaa9dec3745429cc7b1d89bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:03:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:03:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bca8a52cc0a70f356ddfd0bb90f5ad52a8547b7acaa9dec3745429cc7b1d89bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:03:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bca8a52cc0a70f356ddfd0bb90f5ad52a8547b7acaa9dec3745429cc7b1d89bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bca8a52cc0a70f356ddfd0bb90f5ad52a8547b7acaa9dec3745429cc7b1d89bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:03:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:03:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:03:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bca8a52cc0a70f356ddfd0bb90f5ad52a8547b7acaa9dec3745429cc7b1d89bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bca8a52cc0a70f356ddfd0bb90f5ad52a8547b7acaa9dec3745429cc7b1d89bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bca8a52cc0a70f356ddfd0bb90f5ad52a8547b7acaa9dec3745429cc7b1d89bf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:03:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bca8a52cc0a70f356ddfd0bb90f5ad52a8547b7acaa9dec3745429cc7b1d89bf"} {"level":"debug","ts":"2026-07-14T16:03:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bca8a52cc0a70f356ddfd0bb90f5ad52a8547b7acaa9dec3745429cc7b1d89bf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:03:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bca8a52cc0a70f356ddfd0bb90f5ad52a8547b7acaa9dec3745429cc7b1d89bf"} {"level":"debug","ts":"2026-07-14T16:03:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bca8a52cc0a70f356ddfd0bb90f5ad52a8547b7acaa9dec3745429cc7b1d89bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:03:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:03:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bca8a52cc0a70f356ddfd0bb90f5ad52a8547b7acaa9dec3745429cc7b1d89bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:03:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bca8a52cc0a70f356ddfd0bb90f5ad52a8547b7acaa9dec3745429cc7b1d89bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bca8a52cc0a70f356ddfd0bb90f5ad52a8547b7acaa9dec3745429cc7b1d89bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:03:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:03:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:03:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bca8a52cc0a70f356ddfd0bb90f5ad52a8547b7acaa9dec3745429cc7b1d89bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bca8a52cc0a70f356ddfd0bb90f5ad52a8547b7acaa9dec3745429cc7b1d89bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bca8a52cc0a70f356ddfd0bb90f5ad52a8547b7acaa9dec3745429cc7b1d89bf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:03:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bca8a52cc0a70f356ddfd0bb90f5ad52a8547b7acaa9dec3745429cc7b1d89bf"} {"level":"debug","ts":"2026-07-14T16:03:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bca8a52cc0a70f356ddfd0bb90f5ad52a8547b7acaa9dec3745429cc7b1d89bf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:03:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bca8a52cc0a70f356ddfd0bb90f5ad52a8547b7acaa9dec3745429cc7b1d89bf"} {"level":"debug","ts":"2026-07-14T16:03:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bca8a52cc0a70f356ddfd0bb90f5ad52a8547b7acaa9dec3745429cc7b1d89bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:03:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:03:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bca8a52cc0a70f356ddfd0bb90f5ad52a8547b7acaa9dec3745429cc7b1d89bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:03:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bca8a52cc0a70f356ddfd0bb90f5ad52a8547b7acaa9dec3745429cc7b1d89bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bca8a52cc0a70f356ddfd0bb90f5ad52a8547b7acaa9dec3745429cc7b1d89bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:03:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:03:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:03:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bca8a52cc0a70f356ddfd0bb90f5ad52a8547b7acaa9dec3745429cc7b1d89bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bca8a52cc0a70f356ddfd0bb90f5ad52a8547b7acaa9dec3745429cc7b1d89bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bca8a52cc0a70f356ddfd0bb90f5ad52a8547b7acaa9dec3745429cc7b1d89bf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:03:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bca8a52cc0a70f356ddfd0bb90f5ad52a8547b7acaa9dec3745429cc7b1d89bf"} {"level":"debug","ts":"2026-07-14T16:03:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bca8a52cc0a70f356ddfd0bb90f5ad52a8547b7acaa9dec3745429cc7b1d89bf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:03:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bca8a52cc0a70f356ddfd0bb90f5ad52a8547b7acaa9dec3745429cc7b1d89bf"} {"level":"debug","ts":"2026-07-14T16:03:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bca8a52cc0a70f356ddfd0bb90f5ad52a8547b7acaa9dec3745429cc7b1d89bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:03:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:03:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bca8a52cc0a70f356ddfd0bb90f5ad52a8547b7acaa9dec3745429cc7b1d89bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:03:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bca8a52cc0a70f356ddfd0bb90f5ad52a8547b7acaa9dec3745429cc7b1d89bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bca8a52cc0a70f356ddfd0bb90f5ad52a8547b7acaa9dec3745429cc7b1d89bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:03:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:03:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:03:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bca8a52cc0a70f356ddfd0bb90f5ad52a8547b7acaa9dec3745429cc7b1d89bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bca8a52cc0a70f356ddfd0bb90f5ad52a8547b7acaa9dec3745429cc7b1d89bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bca8a52cc0a70f356ddfd0bb90f5ad52a8547b7acaa9dec3745429cc7b1d89bf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:03:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bca8a52cc0a70f356ddfd0bb90f5ad52a8547b7acaa9dec3745429cc7b1d89bf"} {"level":"debug","ts":"2026-07-14T16:03:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bca8a52cc0a70f356ddfd0bb90f5ad52a8547b7acaa9dec3745429cc7b1d89bf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:03:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bca8a52cc0a70f356ddfd0bb90f5ad52a8547b7acaa9dec3745429cc7b1d89bf"} {"level":"debug","ts":"2026-07-14T16:03:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bca8a52cc0a70f356ddfd0bb90f5ad52a8547b7acaa9dec3745429cc7b1d89bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:03:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:03:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bca8a52cc0a70f356ddfd0bb90f5ad52a8547b7acaa9dec3745429cc7b1d89bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:03:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bca8a52cc0a70f356ddfd0bb90f5ad52a8547b7acaa9dec3745429cc7b1d89bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bca8a52cc0a70f356ddfd0bb90f5ad52a8547b7acaa9dec3745429cc7b1d89bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:03:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:03:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:03:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bca8a52cc0a70f356ddfd0bb90f5ad52a8547b7acaa9dec3745429cc7b1d89bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bca8a52cc0a70f356ddfd0bb90f5ad52a8547b7acaa9dec3745429cc7b1d89bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bca8a52cc0a70f356ddfd0bb90f5ad52a8547b7acaa9dec3745429cc7b1d89bf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:03:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bca8a52cc0a70f356ddfd0bb90f5ad52a8547b7acaa9dec3745429cc7b1d89bf"} {"level":"debug","ts":"2026-07-14T16:03:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6c67852148f3fcef75b97609a07066824f31bdfbcd51e77443505bffffaa853","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:03:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:03:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:03:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bca8a52cc0a70f356ddfd0bb90f5ad52a8547b7acaa9dec3745429cc7b1d89bf"} {"level":"info","ts":"2026-07-14T16:03:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6c67852148f3fcef75b97609a07066824f31bdfbcd51e77443505bffffaa853","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bca8a52cc0a70f356ddfd0bb90f5ad52a8547b7acaa9dec3745429cc7b1d89bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:03:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:03:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bca8a52cc0a70f356ddfd0bb90f5ad52a8547b7acaa9dec3745429cc7b1d89bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:03:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6c67852148f3fcef75b97609a07066824f31bdfbcd51e77443505bffffaa853"} {"level":"info","ts":"2026-07-14T16:03:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bca8a52cc0a70f356ddfd0bb90f5ad52a8547b7acaa9dec3745429cc7b1d89bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6c67852148f3fcef75b97609a07066824f31bdfbcd51e77443505bffffaa853","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:03:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:03:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:03:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6c67852148f3fcef75b97609a07066824f31bdfbcd51e77443505bffffaa853","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bca8a52cc0a70f356ddfd0bb90f5ad52a8547b7acaa9dec3745429cc7b1d89bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6c67852148f3fcef75b97609a07066824f31bdfbcd51e77443505bffffaa853","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:03:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6c67852148f3fcef75b97609a07066824f31bdfbcd51e77443505bffffaa853"} {"level":"debug","ts":"2026-07-14T16:03:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6c67852148f3fcef75b97609a07066824f31bdfbcd51e77443505bffffaa853","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:03:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:03:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b6c67852148f3fcef75b97609a07066824f31bdfbcd51e77443505bffffaa853"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:03:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6c67852148f3fcef75b97609a07066824f31bdfbcd51e77443505bffffaa853","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6c67852148f3fcef75b97609a07066824f31bdfbcd51e77443505bffffaa853","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:03:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bca8a52cc0a70f356ddfd0bb90f5ad52a8547b7acaa9dec3745429cc7b1d89bf"} {"level":"info","ts":"2026-07-14T16:03:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6c67852148f3fcef75b97609a07066824f31bdfbcd51e77443505bffffaa853"} {"level":"debug","ts":"2026-07-14T16:03:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1cb3f5c2cd104fc41b94f1d210a08a6fa6f77c059b984284017bd5e7ddc72e64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:03:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:03:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:03:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1cb3f5c2cd104fc41b94f1d210a08a6fa6f77c059b984284017bd5e7ddc72e64","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1cb3f5c2cd104fc41b94f1d210a08a6fa6f77c059b984284017bd5e7ddc72e64","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1cb3f5c2cd104fc41b94f1d210a08a6fa6f77c059b984284017bd5e7ddc72e64","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:03:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1cb3f5c2cd104fc41b94f1d210a08a6fa6f77c059b984284017bd5e7ddc72e64"} {"level":"debug","ts":"2026-07-14T16:03:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1cb3f5c2cd104fc41b94f1d210a08a6fa6f77c059b984284017bd5e7ddc72e64","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:03:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1cb3f5c2cd104fc41b94f1d210a08a6fa6f77c059b984284017bd5e7ddc72e64"} {"level":"debug","ts":"2026-07-14T16:03:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1cb3f5c2cd104fc41b94f1d210a08a6fa6f77c059b984284017bd5e7ddc72e64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:03:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:03:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1cb3f5c2cd104fc41b94f1d210a08a6fa6f77c059b984284017bd5e7ddc72e64"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:03:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1cb3f5c2cd104fc41b94f1d210a08a6fa6f77c059b984284017bd5e7ddc72e64","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1cb3f5c2cd104fc41b94f1d210a08a6fa6f77c059b984284017bd5e7ddc72e64","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0aca85dc8bc9d6da6e14680fd60d4ef4263faa9d9bc2cf920c441f53a5c3375c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:03:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:03:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:03:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0aca85dc8bc9d6da6e14680fd60d4ef4263faa9d9bc2cf920c441f53a5c3375c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0aca85dc8bc9d6da6e14680fd60d4ef4263faa9d9bc2cf920c441f53a5c3375c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0aca85dc8bc9d6da6e14680fd60d4ef4263faa9d9bc2cf920c441f53a5c3375c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:03:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1cb3f5c2cd104fc41b94f1d210a08a6fa6f77c059b984284017bd5e7ddc72e64"} {"level":"debug","ts":"2026-07-14T16:03:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0aca85dc8bc9d6da6e14680fd60d4ef4263faa9d9bc2cf920c441f53a5c3375c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:03:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:03:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:03:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0aca85dc8bc9d6da6e14680fd60d4ef4263faa9d9bc2cf920c441f53a5c3375c"} {"level":"info","ts":"2026-07-14T16:03:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0aca85dc8bc9d6da6e14680fd60d4ef4263faa9d9bc2cf920c441f53a5c3375c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0aca85dc8bc9d6da6e14680fd60d4ef4263faa9d9bc2cf920c441f53a5c3375c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:03:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0aca85dc8bc9d6da6e14680fd60d4ef4263faa9d9bc2cf920c441f53a5c3375c"} {"level":"debug","ts":"2026-07-14T16:03:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0aca85dc8bc9d6da6e14680fd60d4ef4263faa9d9bc2cf920c441f53a5c3375c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:03:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:03:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0aca85dc8bc9d6da6e14680fd60d4ef4263faa9d9bc2cf920c441f53a5c3375c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:03:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0aca85dc8bc9d6da6e14680fd60d4ef4263faa9d9bc2cf920c441f53a5c3375c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0aca85dc8bc9d6da6e14680fd60d4ef4263faa9d9bc2cf920c441f53a5c3375c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:03:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:03:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:03:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0aca85dc8bc9d6da6e14680fd60d4ef4263faa9d9bc2cf920c441f53a5c3375c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0aca85dc8bc9d6da6e14680fd60d4ef4263faa9d9bc2cf920c441f53a5c3375c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0aca85dc8bc9d6da6e14680fd60d4ef4263faa9d9bc2cf920c441f53a5c3375c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:03:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0aca85dc8bc9d6da6e14680fd60d4ef4263faa9d9bc2cf920c441f53a5c3375c"} {"level":"debug","ts":"2026-07-14T16:03:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0aca85dc8bc9d6da6e14680fd60d4ef4263faa9d9bc2cf920c441f53a5c3375c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:03:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0aca85dc8bc9d6da6e14680fd60d4ef4263faa9d9bc2cf920c441f53a5c3375c"} {"level":"debug","ts":"2026-07-14T16:03:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0aca85dc8bc9d6da6e14680fd60d4ef4263faa9d9bc2cf920c441f53a5c3375c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:03:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:03:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0aca85dc8bc9d6da6e14680fd60d4ef4263faa9d9bc2cf920c441f53a5c3375c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:03:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0aca85dc8bc9d6da6e14680fd60d4ef4263faa9d9bc2cf920c441f53a5c3375c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0aca85dc8bc9d6da6e14680fd60d4ef4263faa9d9bc2cf920c441f53a5c3375c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:03:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:03:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:03:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0aca85dc8bc9d6da6e14680fd60d4ef4263faa9d9bc2cf920c441f53a5c3375c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"adb742abf62e24188ca13a4a0042ad0643b3f82c2828972e60f568a47d164d1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:03:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:03:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:03:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"adb742abf62e24188ca13a4a0042ad0643b3f82c2828972e60f568a47d164d1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0aca85dc8bc9d6da6e14680fd60d4ef4263faa9d9bc2cf920c441f53a5c3375c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:03:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0aca85dc8bc9d6da6e14680fd60d4ef4263faa9d9bc2cf920c441f53a5c3375c"} {"level":"debug","ts":"2026-07-14T16:03:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"adb742abf62e24188ca13a4a0042ad0643b3f82c2828972e60f568a47d164d1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:03:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:03:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:03:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"adb742abf62e24188ca13a4a0042ad0643b3f82c2828972e60f568a47d164d1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0aca85dc8bc9d6da6e14680fd60d4ef4263faa9d9bc2cf920c441f53a5c3375c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:03:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:03:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0aca85dc8bc9d6da6e14680fd60d4ef4263faa9d9bc2cf920c441f53a5c3375c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/adb742abf62e24188ca13a4a0042ad0643b3f82c2828972e60f568a47d164d1a"} {"level":"info","ts":"2026-07-14T16:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0aca85dc8bc9d6da6e14680fd60d4ef4263faa9d9bc2cf920c441f53a5c3375c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"adb742abf62e24188ca13a4a0042ad0643b3f82c2828972e60f568a47d164d1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:03:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:03:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["adb742abf62e24188ca13a4a0042ad0643b3f82c2828972e60f568a47d164d1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0aca85dc8bc9d6da6e14680fd60d4ef4263faa9d9bc2cf920c441f53a5c3375c"} {"level":"info","ts":"2026-07-14T16:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"adb742abf62e24188ca13a4a0042ad0643b3f82c2828972e60f568a47d164d1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0aca85dc8bc9d6da6e14680fd60d4ef4263faa9d9bc2cf920c441f53a5c3375c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"adb742abf62e24188ca13a4a0042ad0643b3f82c2828972e60f568a47d164d1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:03:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:03:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/adb742abf62e24188ca13a4a0042ad0643b3f82c2828972e60f568a47d164d1a"} {"level":"info","ts":"2026-07-14T16:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"adb742abf62e24188ca13a4a0042ad0643b3f82c2828972e60f568a47d164d1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"adb742abf62e24188ca13a4a0042ad0643b3f82c2828972e60f568a47d164d1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"adb742abf62e24188ca13a4a0042ad0643b3f82c2828972e60f568a47d164d1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:03:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:03:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["adb742abf62e24188ca13a4a0042ad0643b3f82c2828972e60f568a47d164d1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0aca85dc8bc9d6da6e14680fd60d4ef4263faa9d9bc2cf920c441f53a5c3375c"} {"level":"info","ts":"2026-07-14T16:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"adb742abf62e24188ca13a4a0042ad0643b3f82c2828972e60f568a47d164d1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78a5a278d297266bc93fa0b0dd5b34607e74e6d5ee0f112e3325a4adecd1aa46","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:03:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:03:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/adb742abf62e24188ca13a4a0042ad0643b3f82c2828972e60f568a47d164d1a"} {"level":"info","ts":"2026-07-14T16:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78a5a278d297266bc93fa0b0dd5b34607e74e6d5ee0f112e3325a4adecd1aa46","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"adb742abf62e24188ca13a4a0042ad0643b3f82c2828972e60f568a47d164d1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78a5a278d297266bc93fa0b0dd5b34607e74e6d5ee0f112e3325a4adecd1aa46","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:03:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:03:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78a5a278d297266bc93fa0b0dd5b34607e74e6d5ee0f112e3325a4adecd1aa46"} {"level":"info","ts":"2026-07-14T16:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78a5a278d297266bc93fa0b0dd5b34607e74e6d5ee0f112e3325a4adecd1aa46","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78a5a278d297266bc93fa0b0dd5b34607e74e6d5ee0f112e3325a4adecd1aa46","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:03:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:03:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["78a5a278d297266bc93fa0b0dd5b34607e74e6d5ee0f112e3325a4adecd1aa46"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/adb742abf62e24188ca13a4a0042ad0643b3f82c2828972e60f568a47d164d1a"} {"level":"info","ts":"2026-07-14T16:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78a5a278d297266bc93fa0b0dd5b34607e74e6d5ee0f112e3325a4adecd1aa46","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78a5a278d297266bc93fa0b0dd5b34607e74e6d5ee0f112e3325a4adecd1aa46","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78a5a278d297266bc93fa0b0dd5b34607e74e6d5ee0f112e3325a4adecd1aa46","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:03:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:03:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78a5a278d297266bc93fa0b0dd5b34607e74e6d5ee0f112e3325a4adecd1aa46","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed3e5321965a85fd4e5ab344fb21c3420c9a2d24f290b35bd2370373b216f4de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:03:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:03:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78a5a278d297266bc93fa0b0dd5b34607e74e6d5ee0f112e3325a4adecd1aa46"} {"level":"info","ts":"2026-07-14T16:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed3e5321965a85fd4e5ab344fb21c3420c9a2d24f290b35bd2370373b216f4de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78a5a278d297266bc93fa0b0dd5b34607e74e6d5ee0f112e3325a4adecd1aa46","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:03:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:03:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["78a5a278d297266bc93fa0b0dd5b34607e74e6d5ee0f112e3325a4adecd1aa46"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78a5a278d297266bc93fa0b0dd5b34607e74e6d5ee0f112e3325a4adecd1aa46","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed3e5321965a85fd4e5ab344fb21c3420c9a2d24f290b35bd2370373b216f4de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:03:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:03:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed3e5321965a85fd4e5ab344fb21c3420c9a2d24f290b35bd2370373b216f4de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78a5a278d297266bc93fa0b0dd5b34607e74e6d5ee0f112e3325a4adecd1aa46","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed3e5321965a85fd4e5ab344fb21c3420c9a2d24f290b35bd2370373b216f4de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed3e5321965a85fd4e5ab344fb21c3420c9a2d24f290b35bd2370373b216f4de","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed3e5321965a85fd4e5ab344fb21c3420c9a2d24f290b35bd2370373b216f4de"} {"level":"debug","ts":"2026-07-14T16:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbfe627189dfb4eed6cee326659b9a166ed32b6bff7d85137f1d7bd54b3ec723","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:03:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:03:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78a5a278d297266bc93fa0b0dd5b34607e74e6d5ee0f112e3325a4adecd1aa46"} {"level":"info","ts":"2026-07-14T16:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bbfe627189dfb4eed6cee326659b9a166ed32b6bff7d85137f1d7bd54b3ec723","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed3e5321965a85fd4e5ab344fb21c3420c9a2d24f290b35bd2370373b216f4de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bbfe627189dfb4eed6cee326659b9a166ed32b6bff7d85137f1d7bd54b3ec723","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bbfe627189dfb4eed6cee326659b9a166ed32b6bff7d85137f1d7bd54b3ec723","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed3e5321965a85fd4e5ab344fb21c3420c9a2d24f290b35bd2370373b216f4de"} {"level":"debug","ts":"2026-07-14T16:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbfe627189dfb4eed6cee326659b9a166ed32b6bff7d85137f1d7bd54b3ec723","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:03:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:03:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbfe627189dfb4eed6cee326659b9a166ed32b6bff7d85137f1d7bd54b3ec723"} {"level":"info","ts":"2026-07-14T16:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bbfe627189dfb4eed6cee326659b9a166ed32b6bff7d85137f1d7bd54b3ec723","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bbfe627189dfb4eed6cee326659b9a166ed32b6bff7d85137f1d7bd54b3ec723","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbfe627189dfb4eed6cee326659b9a166ed32b6bff7d85137f1d7bd54b3ec723"} {"level":"debug","ts":"2026-07-14T16:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbfe627189dfb4eed6cee326659b9a166ed32b6bff7d85137f1d7bd54b3ec723","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:03:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:03:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bbfe627189dfb4eed6cee326659b9a166ed32b6bff7d85137f1d7bd54b3ec723"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bbfe627189dfb4eed6cee326659b9a166ed32b6bff7d85137f1d7bd54b3ec723","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed3e5321965a85fd4e5ab344fb21c3420c9a2d24f290b35bd2370373b216f4de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:03:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:03:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ed3e5321965a85fd4e5ab344fb21c3420c9a2d24f290b35bd2370373b216f4de"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4a5a13d791e74d1fbd26c2b91798157ecaa2ebe9cb36c836e3b1b3ce2ec78fe"} {"level":"info","ts":"2026-07-14T16:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed3e5321965a85fd4e5ab344fb21c3420c9a2d24f290b35bd2370373b216f4de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4a5a13d791e74d1fbd26c2b91798157ecaa2ebe9cb36c836e3b1b3ce2ec78fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:03:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:03:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b4a5a13d791e74d1fbd26c2b91798157ecaa2ebe9cb36c836e3b1b3ce2ec78fe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4a5a13d791e74d1fbd26c2b91798157ecaa2ebe9cb36c836e3b1b3ce2ec78fe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbfe627189dfb4eed6cee326659b9a166ed32b6bff7d85137f1d7bd54b3ec723","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:03:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:03:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbfe627189dfb4eed6cee326659b9a166ed32b6bff7d85137f1d7bd54b3ec723"} {"level":"info","ts":"2026-07-14T16:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bbfe627189dfb4eed6cee326659b9a166ed32b6bff7d85137f1d7bd54b3ec723","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed3e5321965a85fd4e5ab344fb21c3420c9a2d24f290b35bd2370373b216f4de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:03:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:03:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed3e5321965a85fd4e5ab344fb21c3420c9a2d24f290b35bd2370373b216f4de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4a5a13d791e74d1fbd26c2b91798157ecaa2ebe9cb36c836e3b1b3ce2ec78fe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbfe627189dfb4eed6cee326659b9a166ed32b6bff7d85137f1d7bd54b3ec723","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:03:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:03:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bbfe627189dfb4eed6cee326659b9a166ed32b6bff7d85137f1d7bd54b3ec723"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed3e5321965a85fd4e5ab344fb21c3420c9a2d24f290b35bd2370373b216f4de"} {"level":"info","ts":"2026-07-14T16:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bbfe627189dfb4eed6cee326659b9a166ed32b6bff7d85137f1d7bd54b3ec723","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed3e5321965a85fd4e5ab344fb21c3420c9a2d24f290b35bd2370373b216f4de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:03:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:03:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ed3e5321965a85fd4e5ab344fb21c3420c9a2d24f290b35bd2370373b216f4de"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4a5a13d791e74d1fbd26c2b91798157ecaa2ebe9cb36c836e3b1b3ce2ec78fe"} {"level":"info","ts":"2026-07-14T16:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed3e5321965a85fd4e5ab344fb21c3420c9a2d24f290b35bd2370373b216f4de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbfe627189dfb4eed6cee326659b9a166ed32b6bff7d85137f1d7bd54b3ec723","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:03:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:03:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bbfe627189dfb4eed6cee326659b9a166ed32b6bff7d85137f1d7bd54b3ec723","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed3e5321965a85fd4e5ab344fb21c3420c9a2d24f290b35bd2370373b216f4de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bbfe627189dfb4eed6cee326659b9a166ed32b6bff7d85137f1d7bd54b3ec723","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f7f14dee0a9e932be52dcbfc94b3ac02dfaa588bc3d30c01db4362ef6d70dc2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:03:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:03:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbfe627189dfb4eed6cee326659b9a166ed32b6bff7d85137f1d7bd54b3ec723"} {"level":"info","ts":"2026-07-14T16:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f7f14dee0a9e932be52dcbfc94b3ac02dfaa588bc3d30c01db4362ef6d70dc2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbfe627189dfb4eed6cee326659b9a166ed32b6bff7d85137f1d7bd54b3ec723","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:03:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:03:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bbfe627189dfb4eed6cee326659b9a166ed32b6bff7d85137f1d7bd54b3ec723"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed3e5321965a85fd4e5ab344fb21c3420c9a2d24f290b35bd2370373b216f4de"} {"level":"info","ts":"2026-07-14T16:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bbfe627189dfb4eed6cee326659b9a166ed32b6bff7d85137f1d7bd54b3ec723","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f7f14dee0a9e932be52dcbfc94b3ac02dfaa588bc3d30c01db4362ef6d70dc2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:03:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:03:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f7f14dee0a9e932be52dcbfc94b3ac02dfaa588bc3d30c01db4362ef6d70dc2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bbfe627189dfb4eed6cee326659b9a166ed32b6bff7d85137f1d7bd54b3ec723","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f7f14dee0a9e932be52dcbfc94b3ac02dfaa588bc3d30c01db4362ef6d70dc2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f7f14dee0a9e932be52dcbfc94b3ac02dfaa588bc3d30c01db4362ef6d70dc2"} {"level":"debug","ts":"2026-07-14T16:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f7f14dee0a9e932be52dcbfc94b3ac02dfaa588bc3d30c01db4362ef6d70dc2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:03:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:03:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8f7f14dee0a9e932be52dcbfc94b3ac02dfaa588bc3d30c01db4362ef6d70dc2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f7f14dee0a9e932be52dcbfc94b3ac02dfaa588bc3d30c01db4362ef6d70dc2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f7f14dee0a9e932be52dcbfc94b3ac02dfaa588bc3d30c01db4362ef6d70dc2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbfe627189dfb4eed6cee326659b9a166ed32b6bff7d85137f1d7bd54b3ec723"} {"level":"info","ts":"2026-07-14T16:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f7f14dee0a9e932be52dcbfc94b3ac02dfaa588bc3d30c01db4362ef6d70dc2"} {"level":"debug","ts":"2026-07-14T16:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cfb592462f2243bb8146a7ac02bf262c9140c80f4e689d21fe742db177c95a49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:03:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:03:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cfb592462f2243bb8146a7ac02bf262c9140c80f4e689d21fe742db177c95a49","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cfb592462f2243bb8146a7ac02bf262c9140c80f4e689d21fe742db177c95a49","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eea4780af36b2becfd92eaca989d3f6c565c2e2cea37415afb6d63a4dc402b6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:03:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:03:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cfb592462f2243bb8146a7ac02bf262c9140c80f4e689d21fe742db177c95a49"} {"level":"info","ts":"2026-07-14T16:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eea4780af36b2becfd92eaca989d3f6c565c2e2cea37415afb6d63a4dc402b6c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cfb592462f2243bb8146a7ac02bf262c9140c80f4e689d21fe742db177c95a49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:03:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:03:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cfb592462f2243bb8146a7ac02bf262c9140c80f4e689d21fe742db177c95a49"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cfb592462f2243bb8146a7ac02bf262c9140c80f4e689d21fe742db177c95a49","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eea4780af36b2becfd92eaca989d3f6c565c2e2cea37415afb6d63a4dc402b6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:03:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:03:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eea4780af36b2becfd92eaca989d3f6c565c2e2cea37415afb6d63a4dc402b6c"} {"level":"info","ts":"2026-07-14T16:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eea4780af36b2becfd92eaca989d3f6c565c2e2cea37415afb6d63a4dc402b6c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cfb592462f2243bb8146a7ac02bf262c9140c80f4e689d21fe742db177c95a49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:03:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:03:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cfb592462f2243bb8146a7ac02bf262c9140c80f4e689d21fe742db177c95a49"} {"level":"info","ts":"2026-07-14T16:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cfb592462f2243bb8146a7ac02bf262c9140c80f4e689d21fe742db177c95a49","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eea4780af36b2becfd92eaca989d3f6c565c2e2cea37415afb6d63a4dc402b6c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cfb592462f2243bb8146a7ac02bf262c9140c80f4e689d21fe742db177c95a49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:03:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:03:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cfb592462f2243bb8146a7ac02bf262c9140c80f4e689d21fe742db177c95a49"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cfb592462f2243bb8146a7ac02bf262c9140c80f4e689d21fe742db177c95a49","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cfb592462f2243bb8146a7ac02bf262c9140c80f4e689d21fe742db177c95a49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:03:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:03:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cfb592462f2243bb8146a7ac02bf262c9140c80f4e689d21fe742db177c95a49"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-14T16:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"cfb592462f2243bb8146a7ac02bf262c9140c80f4e689d21fe742db177c95a49","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"cfb592462f2243bb8146a7ac02bf262c9140c80f4e689d21fe742db177c95a49\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T16:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cfb592462f2243bb8146a7ac02bf262c9140c80f4e689d21fe742db177c95a49","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eea4780af36b2becfd92eaca989d3f6c565c2e2cea37415afb6d63a4dc402b6c"} {"level":"debug","ts":"2026-07-14T16:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eea4780af36b2becfd92eaca989d3f6c565c2e2cea37415afb6d63a4dc402b6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:03:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:03:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eea4780af36b2becfd92eaca989d3f6c565c2e2cea37415afb6d63a4dc402b6c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eea4780af36b2becfd92eaca989d3f6c565c2e2cea37415afb6d63a4dc402b6c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cfb592462f2243bb8146a7ac02bf262c9140c80f4e689d21fe742db177c95a49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:03:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:03:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cfb592462f2243bb8146a7ac02bf262c9140c80f4e689d21fe742db177c95a49"} {"level":"info","ts":"2026-07-14T16:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cfb592462f2243bb8146a7ac02bf262c9140c80f4e689d21fe742db177c95a49","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eea4780af36b2becfd92eaca989d3f6c565c2e2cea37415afb6d63a4dc402b6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:03:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:03:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eea4780af36b2becfd92eaca989d3f6c565c2e2cea37415afb6d63a4dc402b6c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cfb592462f2243bb8146a7ac02bf262c9140c80f4e689d21fe742db177c95a49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:03:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:03:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cfb592462f2243bb8146a7ac02bf262c9140c80f4e689d21fe742db177c95a49"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eea4780af36b2becfd92eaca989d3f6c565c2e2cea37415afb6d63a4dc402b6c"} {"level":"info","ts":"2026-07-14T16:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cfb592462f2243bb8146a7ac02bf262c9140c80f4e689d21fe742db177c95a49","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eea4780af36b2becfd92eaca989d3f6c565c2e2cea37415afb6d63a4dc402b6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:03:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:03:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eea4780af36b2becfd92eaca989d3f6c565c2e2cea37415afb6d63a4dc402b6c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eea4780af36b2becfd92eaca989d3f6c565c2e2cea37415afb6d63a4dc402b6c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cfb592462f2243bb8146a7ac02bf262c9140c80f4e689d21fe742db177c95a49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:03:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:03:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cfb592462f2243bb8146a7ac02bf262c9140c80f4e689d21fe742db177c95a49"} {"level":"info","ts":"2026-07-14T16:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cfb592462f2243bb8146a7ac02bf262c9140c80f4e689d21fe742db177c95a49","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eea4780af36b2becfd92eaca989d3f6c565c2e2cea37415afb6d63a4dc402b6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:03:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:03:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eea4780af36b2becfd92eaca989d3f6c565c2e2cea37415afb6d63a4dc402b6c"} {"level":"info","ts":"2026-07-14T16:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eea4780af36b2becfd92eaca989d3f6c565c2e2cea37415afb6d63a4dc402b6c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cfb592462f2243bb8146a7ac02bf262c9140c80f4e689d21fe742db177c95a49","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eea4780af36b2becfd92eaca989d3f6c565c2e2cea37415afb6d63a4dc402b6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:03:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:03:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eea4780af36b2becfd92eaca989d3f6c565c2e2cea37415afb6d63a4dc402b6c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cfb592462f2243bb8146a7ac02bf262c9140c80f4e689d21fe742db177c95a49"} {"level":"info","ts":"2026-07-14T16:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eea4780af36b2becfd92eaca989d3f6c565c2e2cea37415afb6d63a4dc402b6c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cfb592462f2243bb8146a7ac02bf262c9140c80f4e689d21fe742db177c95a49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:03:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:03:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cfb592462f2243bb8146a7ac02bf262c9140c80f4e689d21fe742db177c95a49"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eea4780af36b2becfd92eaca989d3f6c565c2e2cea37415afb6d63a4dc402b6c"} {"level":"info","ts":"2026-07-14T16:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eea4780af36b2becfd92eaca989d3f6c565c2e2cea37415afb6d63a4dc402b6c"} {"level":"info","ts":"2026-07-14T16:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cfb592462f2243bb8146a7ac02bf262c9140c80f4e689d21fe742db177c95a49","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eea4780af36b2becfd92eaca989d3f6c565c2e2cea37415afb6d63a4dc402b6c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cfb592462f2243bb8146a7ac02bf262c9140c80f4e689d21fe742db177c95a49","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cfb592462f2243bb8146a7ac02bf262c9140c80f4e689d21fe742db177c95a49"} {"level":"info","ts":"2026-07-14T16:03:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9f5e3dfb-9ded-4023-b023-5731615f08e1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:42488","PortSpecifier":{"PortValue":42488}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9f5e3dfb-9ded-4023-b023-5731615f08e1","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-bea800.apps.bef11670-107b-4509-941d-05c0a92404fb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T16:03:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9f5e3dfb-9ded-4023-b023-5731615f08e1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:42488","PortSpecifier":{"PortValue":42488}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784044998,"nanos":128952668},"http":{"id":"9f5e3dfb-9ded-4023-b023-5731615f08e1","method":"POST","headers":{":authority":"e2e-shared-a-bea800.apps.bef11670-107b-4509-941d-05c0a92404fb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T16:03:18Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9f5e3dfb-9ded-4023-b023-5731615f08e1","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T16:03:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9f5e3dfb-9ded-4023-b023-5731615f08e1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"26fbefcd-1f3f-4523-899a-2d5408ecb467","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3165f2a7-c048-415b-a85c-a215d11d2af8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/05c0a92404fb"]}} {"level":"debug","ts":"2026-07-14T16:03:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9f5e3dfb-9ded-4023-b023-5731615f08e1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/05c0a92404fb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3165f2a7-c048-415b-a85c-a215d11d2af8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"26fbefcd-1f3f-4523-899a-2d5408ecb467","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"dc57175700ab457fddd972f579c87c640cdf2a48ca10c986490fc4e1ac1e4c7f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.76:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-bea800.apps.bef11670-107b-4509-941d-05c0a92404fb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T16:03:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9f5e3dfb-9ded-4023-b023-5731615f08e1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T16:03:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9f5e3dfb-9ded-4023-b023-5731615f08e1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T16:03:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9f5e3dfb-9ded-4023-b023-5731615f08e1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bea800/auth-test-model-bea800\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-bea800/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T16:03:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9f5e3dfb-9ded-4023-b023-5731615f08e1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T16:03:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9f5e3dfb-9ded-4023-b023-5731615f08e1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T16:03:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9f5e3dfb-9ded-4023-b023-5731615f08e1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T16:03:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9f5e3dfb-9ded-4023-b023-5731615f08e1","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T16:03:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9f5e3dfb-9ded-4023-b023-5731615f08e1","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T16:03:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"98e1770a-b2a9-451c-a678-b1766e40f8f0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:37124","PortSpecifier":{"PortValue":37124}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.78:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"98e1770a-b2a9-451c-a678-b1766e40f8f0","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-519447.apps.bef11670-107b-4509-941d-05c0a92404fb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T16:03:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"98e1770a-b2a9-451c-a678-b1766e40f8f0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:37124","PortSpecifier":{"PortValue":37124}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.78:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784044998,"nanos":189280064},"http":{"id":"98e1770a-b2a9-451c-a678-b1766e40f8f0","method":"POST","headers":{":authority":"e2e-shared-b-519447.apps.bef11670-107b-4509-941d-05c0a92404fb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T16:03:18Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"98e1770a-b2a9-451c-a678-b1766e40f8f0","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T16:03:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"98e1770a-b2a9-451c-a678-b1766e40f8f0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"26fbefcd-1f3f-4523-899a-2d5408ecb467","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3165f2a7-c048-415b-a85c-a215d11d2af8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/05c0a92404fb"]}} {"level":"debug","ts":"2026-07-14T16:03:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"98e1770a-b2a9-451c-a678-b1766e40f8f0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/05c0a92404fb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3165f2a7-c048-415b-a85c-a215d11d2af8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"26fbefcd-1f3f-4523-899a-2d5408ecb467","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"adb742abf62e24188ca13a4a0042ad0643b3f82c2828972e60f568a47d164d1a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.78:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-519447.apps.bef11670-107b-4509-941d-05c0a92404fb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T16:03:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"98e1770a-b2a9-451c-a678-b1766e40f8f0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T16:03:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"98e1770a-b2a9-451c-a678-b1766e40f8f0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T16:03:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"98e1770a-b2a9-451c-a678-b1766e40f8f0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-519447/auth-test-model-519447\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-519447/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T16:03:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"98e1770a-b2a9-451c-a678-b1766e40f8f0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T16:03:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"98e1770a-b2a9-451c-a678-b1766e40f8f0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T16:03:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"98e1770a-b2a9-451c-a678-b1766e40f8f0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T16:03:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"98e1770a-b2a9-451c-a678-b1766e40f8f0","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T16:03:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"98e1770a-b2a9-451c-a678-b1766e40f8f0","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T16:03:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8fa28aa4-3547-4368-98a6-4d961ded0ebf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:42494","PortSpecifier":{"PortValue":42494}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8fa28aa4-3547-4368-98a6-4d961ded0ebf","method":"GET","path":"/maas-api/v1/api-keys/d30fa74d-8ac9-4224-b364-df67448455c6","host":"e2e-shared-a-bea800.apps.bef11670-107b-4509-941d-05c0a92404fb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T16:03:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8fa28aa4-3547-4368-98a6-4d961ded0ebf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:42494","PortSpecifier":{"PortValue":42494}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784044998,"nanos":252902511},"http":{"id":"8fa28aa4-3547-4368-98a6-4d961ded0ebf","method":"GET","headers":{":authority":"e2e-shared-a-bea800.apps.bef11670-107b-4509-941d-05c0a92404fb.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/d30fa74d-8ac9-4224-b364-df67448455c6",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T16:03:18Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8fa28aa4-3547-4368-98a6-4d961ded0ebf","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T16:03:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8fa28aa4-3547-4368-98a6-4d961ded0ebf","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"26fbefcd-1f3f-4523-899a-2d5408ecb467","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3165f2a7-c048-415b-a85c-a215d11d2af8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/05c0a92404fb"]}} {"level":"debug","ts":"2026-07-14T16:03:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8fa28aa4-3547-4368-98a6-4d961ded0ebf","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/05c0a92404fb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3165f2a7-c048-415b-a85c-a215d11d2af8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"26fbefcd-1f3f-4523-899a-2d5408ecb467","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"dc57175700ab457fddd972f579c87c640cdf2a48ca10c986490fc4e1ac1e4c7f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.76:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-bea800.apps.bef11670-107b-4509-941d-05c0a92404fb.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/d30fa74d-8ac9-4224-b364-df67448455c6",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T16:03:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8fa28aa4-3547-4368-98a6-4d961ded0ebf","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T16:03:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8fa28aa4-3547-4368-98a6-4d961ded0ebf","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T16:03:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8fa28aa4-3547-4368-98a6-4d961ded0ebf","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bea800/auth-test-model-bea800\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-bea800/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T16:03:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8fa28aa4-3547-4368-98a6-4d961ded0ebf","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T16:03:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8fa28aa4-3547-4368-98a6-4d961ded0ebf","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T16:03:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8fa28aa4-3547-4368-98a6-4d961ded0ebf","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-14T16:03:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8fa28aa4-3547-4368-98a6-4d961ded0ebf","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T16:03:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8fa28aa4-3547-4368-98a6-4d961ded0ebf","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T16:03:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"14f29e84-d8da-4460-880d-9aa5113ec568","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:37138","PortSpecifier":{"PortValue":37138}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.78:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"14f29e84-d8da-4460-880d-9aa5113ec568","method":"GET","path":"/maas-api/v1/api-keys/a577736a-8fab-4dea-8afc-74bb7dff35a6","host":"e2e-shared-b-519447.apps.bef11670-107b-4509-941d-05c0a92404fb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T16:03:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"14f29e84-d8da-4460-880d-9aa5113ec568","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:37138","PortSpecifier":{"PortValue":37138}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.78:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784044998,"nanos":289700545},"http":{"id":"14f29e84-d8da-4460-880d-9aa5113ec568","method":"GET","headers":{":authority":"e2e-shared-b-519447.apps.bef11670-107b-4509-941d-05c0a92404fb.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/a577736a-8fab-4dea-8afc-74bb7dff35a6",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T16:03:18Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"14f29e84-d8da-4460-880d-9aa5113ec568","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T16:03:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"14f29e84-d8da-4460-880d-9aa5113ec568","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"26fbefcd-1f3f-4523-899a-2d5408ecb467","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3165f2a7-c048-415b-a85c-a215d11d2af8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/05c0a92404fb"]}} {"level":"debug","ts":"2026-07-14T16:03:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"14f29e84-d8da-4460-880d-9aa5113ec568","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/05c0a92404fb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3165f2a7-c048-415b-a85c-a215d11d2af8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"26fbefcd-1f3f-4523-899a-2d5408ecb467","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"adb742abf62e24188ca13a4a0042ad0643b3f82c2828972e60f568a47d164d1a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.78:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-519447.apps.bef11670-107b-4509-941d-05c0a92404fb.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/a577736a-8fab-4dea-8afc-74bb7dff35a6",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T16:03:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"14f29e84-d8da-4460-880d-9aa5113ec568","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T16:03:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"14f29e84-d8da-4460-880d-9aa5113ec568","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T16:03:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"14f29e84-d8da-4460-880d-9aa5113ec568","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-519447/auth-test-model-519447\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-519447/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T16:03:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"14f29e84-d8da-4460-880d-9aa5113ec568","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T16:03:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"14f29e84-d8da-4460-880d-9aa5113ec568","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T16:03:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"14f29e84-d8da-4460-880d-9aa5113ec568","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-14T16:03:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"14f29e84-d8da-4460-880d-9aa5113ec568","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T16:03:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"14f29e84-d8da-4460-880d-9aa5113ec568","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T16:03:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"297043f5-ecdc-46cb-8446-31febb8b92a3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:36726","PortSpecifier":{"PortValue":36726}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"297043f5-ecdc-46cb-8446-31febb8b92a3","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-bea800.apps.bef11670-107b-4509-941d-05c0a92404fb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T16:03:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"297043f5-ecdc-46cb-8446-31febb8b92a3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:36726","PortSpecifier":{"PortValue":36726}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784045015,"nanos":648946942},"http":{"id":"297043f5-ecdc-46cb-8446-31febb8b92a3","method":"POST","headers":{":authority":"e2e-shared-a-bea800.apps.bef11670-107b-4509-941d-05c0a92404fb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T16:03:35Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"297043f5-ecdc-46cb-8446-31febb8b92a3","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T16:03:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"297043f5-ecdc-46cb-8446-31febb8b92a3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"26fbefcd-1f3f-4523-899a-2d5408ecb467","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3165f2a7-c048-415b-a85c-a215d11d2af8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/05c0a92404fb"]}} {"level":"debug","ts":"2026-07-14T16:03:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"297043f5-ecdc-46cb-8446-31febb8b92a3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/05c0a92404fb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3165f2a7-c048-415b-a85c-a215d11d2af8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"26fbefcd-1f3f-4523-899a-2d5408ecb467","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"dc57175700ab457fddd972f579c87c640cdf2a48ca10c986490fc4e1ac1e4c7f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.76:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-bea800.apps.bef11670-107b-4509-941d-05c0a92404fb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T16:03:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"297043f5-ecdc-46cb-8446-31febb8b92a3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T16:03:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"297043f5-ecdc-46cb-8446-31febb8b92a3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T16:03:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"297043f5-ecdc-46cb-8446-31febb8b92a3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bea800/auth-test-model-bea800\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-bea800/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T16:03:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"297043f5-ecdc-46cb-8446-31febb8b92a3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T16:03:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"297043f5-ecdc-46cb-8446-31febb8b92a3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T16:03:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"297043f5-ecdc-46cb-8446-31febb8b92a3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-14T16:03:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"297043f5-ecdc-46cb-8446-31febb8b92a3","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T16:03:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"297043f5-ecdc-46cb-8446-31febb8b92a3","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T16:03:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"86f26ee7-aef0-4a81-a236-4b777f45d7b2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:46668","PortSpecifier":{"PortValue":46668}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.78:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"86f26ee7-aef0-4a81-a236-4b777f45d7b2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-519447.apps.bef11670-107b-4509-941d-05c0a92404fb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T16:03:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"86f26ee7-aef0-4a81-a236-4b777f45d7b2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:46668","PortSpecifier":{"PortValue":46668}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.78:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784045015,"nanos":684540860},"http":{"id":"86f26ee7-aef0-4a81-a236-4b777f45d7b2","method":"POST","headers":{":authority":"e2e-shared-b-519447.apps.bef11670-107b-4509-941d-05c0a92404fb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T16:03:35Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"86f26ee7-aef0-4a81-a236-4b777f45d7b2","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T16:03:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"86f26ee7-aef0-4a81-a236-4b777f45d7b2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"26fbefcd-1f3f-4523-899a-2d5408ecb467","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3165f2a7-c048-415b-a85c-a215d11d2af8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/05c0a92404fb"]}} {"level":"debug","ts":"2026-07-14T16:03:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"86f26ee7-aef0-4a81-a236-4b777f45d7b2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/05c0a92404fb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3165f2a7-c048-415b-a85c-a215d11d2af8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"26fbefcd-1f3f-4523-899a-2d5408ecb467","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"adb742abf62e24188ca13a4a0042ad0643b3f82c2828972e60f568a47d164d1a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.78:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-519447.apps.bef11670-107b-4509-941d-05c0a92404fb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T16:03:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"86f26ee7-aef0-4a81-a236-4b777f45d7b2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T16:03:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"86f26ee7-aef0-4a81-a236-4b777f45d7b2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T16:03:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"86f26ee7-aef0-4a81-a236-4b777f45d7b2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-519447/auth-test-model-519447\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-519447/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T16:03:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"86f26ee7-aef0-4a81-a236-4b777f45d7b2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T16:03:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"86f26ee7-aef0-4a81-a236-4b777f45d7b2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T16:03:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"86f26ee7-aef0-4a81-a236-4b777f45d7b2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-14T16:03:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"86f26ee7-aef0-4a81-a236-4b777f45d7b2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T16:03:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"86f26ee7-aef0-4a81-a236-4b777f45d7b2","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T16:03:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6531c737-c052-447c-9dfe-61f64991f3b7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:36740","PortSpecifier":{"PortValue":36740}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6531c737-c052-447c-9dfe-61f64991f3b7","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-bea800.apps.bef11670-107b-4509-941d-05c0a92404fb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T16:03:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6531c737-c052-447c-9dfe-61f64991f3b7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:36740","PortSpecifier":{"PortValue":36740}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784045015,"nanos":728015079},"http":{"id":"6531c737-c052-447c-9dfe-61f64991f3b7","method":"GET","headers":{":authority":"e2e-shared-a-bea800.apps.bef11670-107b-4509-941d-05c0a92404fb.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T16:03:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6531c737-c052-447c-9dfe-61f64991f3b7","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-wB27bhti6jjgTVAq_CuySFmxx8bsQ5MvBAs1AXKTN2EEKgSXCslsgqFIqcxn"} {"level":"debug","ts":"2026-07-14T16:03:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6531c737-c052-447c-9dfe-61f64991f3b7","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-bea800.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-wB27bhti6jjgTVAq_CuySFmxx8bsQ5MvBAs1AXKTN2EEKgSXCslsgqFIqcxn\"}"} {"level":"debug","ts":"2026-07-14T16:03:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6531c737-c052-447c-9dfe-61f64991f3b7","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bea800.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7c78bb1c-e409-417c-9d36-c10702651ef9","keyName":"e2e-auth-iso-a-bb0420","subscription":"e2e-auth-iso-b680bf","tenant":"e2e-shared-a-bea800","userId":"7c78bb1c-e409-417c-9d36-c10702651ef9","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T16:03:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6531c737-c052-447c-9dfe-61f64991f3b7","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T16:03:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6531c737-c052-447c-9dfe-61f64991f3b7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T16:03:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6531c737-c052-447c-9dfe-61f64991f3b7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T16:03:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6531c737-c052-447c-9dfe-61f64991f3b7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bea800/auth-test-model-bea800\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-bea800/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T16:03:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6531c737-c052-447c-9dfe-61f64991f3b7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-14T16:03:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6531c737-c052-447c-9dfe-61f64991f3b7","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T16:03:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6531c737-c052-447c-9dfe-61f64991f3b7","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T16:03:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6531c737-c052-447c-9dfe-61f64991f3b7","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-b680bf"} {"level":"info","ts":"2026-07-14T16:03:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6531c737-c052-447c-9dfe-61f64991f3b7","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T16:03:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6531c737-c052-447c-9dfe-61f64991f3b7","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T16:03:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8d06d54d-0e81-4daf-bfd7-7bd9c2f5548d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:59834","PortSpecifier":{"PortValue":59834}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8d06d54d-0e81-4daf-bfd7-7bd9c2f5548d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-bea800.apps.bef11670-107b-4509-941d-05c0a92404fb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T16:03:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8d06d54d-0e81-4daf-bfd7-7bd9c2f5548d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:59834","PortSpecifier":{"PortValue":59834}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784045033,"nanos":49162591},"http":{"id":"8d06d54d-0e81-4daf-bfd7-7bd9c2f5548d","method":"POST","headers":{":authority":"e2e-shared-a-bea800.apps.bef11670-107b-4509-941d-05c0a92404fb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T16:03:53Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8d06d54d-0e81-4daf-bfd7-7bd9c2f5548d","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T16:03:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8d06d54d-0e81-4daf-bfd7-7bd9c2f5548d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"26fbefcd-1f3f-4523-899a-2d5408ecb467","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3165f2a7-c048-415b-a85c-a215d11d2af8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/05c0a92404fb"]}} {"level":"debug","ts":"2026-07-14T16:03:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8d06d54d-0e81-4daf-bfd7-7bd9c2f5548d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/05c0a92404fb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3165f2a7-c048-415b-a85c-a215d11d2af8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"26fbefcd-1f3f-4523-899a-2d5408ecb467","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"dc57175700ab457fddd972f579c87c640cdf2a48ca10c986490fc4e1ac1e4c7f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.76:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-bea800.apps.bef11670-107b-4509-941d-05c0a92404fb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T16:03:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8d06d54d-0e81-4daf-bfd7-7bd9c2f5548d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T16:03:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8d06d54d-0e81-4daf-bfd7-7bd9c2f5548d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T16:03:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8d06d54d-0e81-4daf-bfd7-7bd9c2f5548d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bea800/auth-test-model-bea800\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-bea800/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T16:03:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8d06d54d-0e81-4daf-bfd7-7bd9c2f5548d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T16:03:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8d06d54d-0e81-4daf-bfd7-7bd9c2f5548d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T16:03:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8d06d54d-0e81-4daf-bfd7-7bd9c2f5548d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T16:03:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8d06d54d-0e81-4daf-bfd7-7bd9c2f5548d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T16:03:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8d06d54d-0e81-4daf-bfd7-7bd9c2f5548d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T16:03:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d21fcc33-9bde-4f19-86db-c3f9a26b7d06","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:39680","PortSpecifier":{"PortValue":39680}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.78:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d21fcc33-9bde-4f19-86db-c3f9a26b7d06","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-519447.apps.bef11670-107b-4509-941d-05c0a92404fb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T16:03:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d21fcc33-9bde-4f19-86db-c3f9a26b7d06","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:39680","PortSpecifier":{"PortValue":39680}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.78:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784045033,"nanos":91896129},"http":{"id":"d21fcc33-9bde-4f19-86db-c3f9a26b7d06","method":"POST","headers":{":authority":"e2e-shared-b-519447.apps.bef11670-107b-4509-941d-05c0a92404fb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T16:03:53Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d21fcc33-9bde-4f19-86db-c3f9a26b7d06","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T16:03:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d21fcc33-9bde-4f19-86db-c3f9a26b7d06","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"26fbefcd-1f3f-4523-899a-2d5408ecb467","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3165f2a7-c048-415b-a85c-a215d11d2af8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/05c0a92404fb"]}} {"level":"debug","ts":"2026-07-14T16:03:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d21fcc33-9bde-4f19-86db-c3f9a26b7d06","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/05c0a92404fb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3165f2a7-c048-415b-a85c-a215d11d2af8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"26fbefcd-1f3f-4523-899a-2d5408ecb467","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"adb742abf62e24188ca13a4a0042ad0643b3f82c2828972e60f568a47d164d1a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.78:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-519447.apps.bef11670-107b-4509-941d-05c0a92404fb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T16:03:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d21fcc33-9bde-4f19-86db-c3f9a26b7d06","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T16:03:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d21fcc33-9bde-4f19-86db-c3f9a26b7d06","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T16:03:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d21fcc33-9bde-4f19-86db-c3f9a26b7d06","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-519447/auth-test-model-519447\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-519447/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T16:03:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d21fcc33-9bde-4f19-86db-c3f9a26b7d06","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T16:03:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d21fcc33-9bde-4f19-86db-c3f9a26b7d06","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T16:03:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d21fcc33-9bde-4f19-86db-c3f9a26b7d06","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T16:03:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d21fcc33-9bde-4f19-86db-c3f9a26b7d06","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T16:03:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d21fcc33-9bde-4f19-86db-c3f9a26b7d06","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T16:03:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f5873744-b212-4e6c-b3e6-87b2c6d7a654","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:39696","PortSpecifier":{"PortValue":39696}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.78:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f5873744-b212-4e6c-b3e6-87b2c6d7a654","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-519447.apps.bef11670-107b-4509-941d-05c0a92404fb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T16:03:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f5873744-b212-4e6c-b3e6-87b2c6d7a654","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:39696","PortSpecifier":{"PortValue":39696}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.78:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784045033,"nanos":130443606},"http":{"id":"f5873744-b212-4e6c-b3e6-87b2c6d7a654","method":"GET","headers":{":authority":"e2e-shared-b-519447.apps.bef11670-107b-4509-941d-05c0a92404fb.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T16:03:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f5873744-b212-4e6c-b3e6-87b2c6d7a654","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-8cyxaSnKmSKEff7l_uHiH0QrwohReMEIbsFAfojiKdEoHXxm8tJkb23PPRr7"} {"level":"debug","ts":"2026-07-14T16:03:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f5873744-b212-4e6c-b3e6-87b2c6d7a654","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-519447.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-8cyxaSnKmSKEff7l_uHiH0QrwohReMEIbsFAfojiKdEoHXxm8tJkb23PPRr7\"}"} {"level":"debug","ts":"2026-07-14T16:03:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f5873744-b212-4e6c-b3e6-87b2c6d7a654","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-519447.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}} {"level":"debug","ts":"2026-07-14T16:03:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f5873744-b212-4e6c-b3e6-87b2c6d7a654","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"adb742abf62e24188ca13a4a0042ad0643b3f82c2828972e60f568a47d164d1a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.78:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-519447.apps.bef11670-107b-4509-941d-05c0a92404fb.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T16:03:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f5873744-b212-4e6c-b3e6-87b2c6d7a654","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T16:03:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"f5873744-b212-4e6c-b3e6-87b2c6d7a654","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"} {"level":"info","ts":"2026-07-14T16:03:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f5873744-b212-4e6c-b3e6-87b2c6d7a654","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}} {"level":"debug","ts":"2026-07-14T16:03:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f5873744-b212-4e6c-b3e6-87b2c6d7a654","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}} {"level":"info","ts":"2026-07-14T16:04:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8aa95a11-6dff-4653-a187-50ab4a50a55e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:57180","PortSpecifier":{"PortValue":57180}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8aa95a11-6dff-4653-a187-50ab4a50a55e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-bea800.apps.bef11670-107b-4509-941d-05c0a92404fb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T16:04:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8aa95a11-6dff-4653-a187-50ab4a50a55e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:57180","PortSpecifier":{"PortValue":57180}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784045050,"nanos":459354682},"http":{"id":"8aa95a11-6dff-4653-a187-50ab4a50a55e","method":"POST","headers":{":authority":"e2e-shared-a-bea800.apps.bef11670-107b-4509-941d-05c0a92404fb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T16:04:10Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8aa95a11-6dff-4653-a187-50ab4a50a55e","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T16:04:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8aa95a11-6dff-4653-a187-50ab4a50a55e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"26fbefcd-1f3f-4523-899a-2d5408ecb467","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3165f2a7-c048-415b-a85c-a215d11d2af8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/05c0a92404fb"]}} {"level":"debug","ts":"2026-07-14T16:04:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8aa95a11-6dff-4653-a187-50ab4a50a55e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/05c0a92404fb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3165f2a7-c048-415b-a85c-a215d11d2af8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"26fbefcd-1f3f-4523-899a-2d5408ecb467","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"dc57175700ab457fddd972f579c87c640cdf2a48ca10c986490fc4e1ac1e4c7f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.76:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-bea800.apps.bef11670-107b-4509-941d-05c0a92404fb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T16:04:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8aa95a11-6dff-4653-a187-50ab4a50a55e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T16:04:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8aa95a11-6dff-4653-a187-50ab4a50a55e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T16:04:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8aa95a11-6dff-4653-a187-50ab4a50a55e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bea800/auth-test-model-bea800\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-bea800/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T16:04:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8aa95a11-6dff-4653-a187-50ab4a50a55e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T16:04:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8aa95a11-6dff-4653-a187-50ab4a50a55e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T16:04:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8aa95a11-6dff-4653-a187-50ab4a50a55e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T16:04:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8aa95a11-6dff-4653-a187-50ab4a50a55e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T16:04:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8aa95a11-6dff-4653-a187-50ab4a50a55e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T16:04:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7c7a4067-22e8-452e-9758-32ce54ba01af","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:44600","PortSpecifier":{"PortValue":44600}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.78:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7c7a4067-22e8-452e-9758-32ce54ba01af","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-519447.apps.bef11670-107b-4509-941d-05c0a92404fb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T16:04:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7c7a4067-22e8-452e-9758-32ce54ba01af","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:44600","PortSpecifier":{"PortValue":44600}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.78:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784045050,"nanos":501045811},"http":{"id":"7c7a4067-22e8-452e-9758-32ce54ba01af","method":"POST","headers":{":authority":"e2e-shared-b-519447.apps.bef11670-107b-4509-941d-05c0a92404fb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T16:04:10Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7c7a4067-22e8-452e-9758-32ce54ba01af","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T16:04:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7c7a4067-22e8-452e-9758-32ce54ba01af","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"26fbefcd-1f3f-4523-899a-2d5408ecb467","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3165f2a7-c048-415b-a85c-a215d11d2af8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/05c0a92404fb"]}} {"level":"debug","ts":"2026-07-14T16:04:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7c7a4067-22e8-452e-9758-32ce54ba01af","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/05c0a92404fb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3165f2a7-c048-415b-a85c-a215d11d2af8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"26fbefcd-1f3f-4523-899a-2d5408ecb467","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"adb742abf62e24188ca13a4a0042ad0643b3f82c2828972e60f568a47d164d1a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.78:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-519447.apps.bef11670-107b-4509-941d-05c0a92404fb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T16:04:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7c7a4067-22e8-452e-9758-32ce54ba01af","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T16:04:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7c7a4067-22e8-452e-9758-32ce54ba01af","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T16:04:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7c7a4067-22e8-452e-9758-32ce54ba01af","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-519447/auth-test-model-519447\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-519447/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T16:04:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7c7a4067-22e8-452e-9758-32ce54ba01af","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T16:04:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7c7a4067-22e8-452e-9758-32ce54ba01af","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T16:04:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7c7a4067-22e8-452e-9758-32ce54ba01af","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T16:04:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7c7a4067-22e8-452e-9758-32ce54ba01af","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T16:04:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7c7a4067-22e8-452e-9758-32ce54ba01af","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T16:04:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e711ff6f-4153-4fe3-be07-641e87c57e49","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:57184","PortSpecifier":{"PortValue":57184}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e711ff6f-4153-4fe3-be07-641e87c57e49","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-bea800.apps.bef11670-107b-4509-941d-05c0a92404fb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T16:04:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e711ff6f-4153-4fe3-be07-641e87c57e49","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:57184","PortSpecifier":{"PortValue":57184}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784045050,"nanos":546552182},"http":{"id":"e711ff6f-4153-4fe3-be07-641e87c57e49","method":"POST","headers":{":authority":"e2e-shared-a-bea800.apps.bef11670-107b-4509-941d-05c0a92404fb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T16:04:10Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e711ff6f-4153-4fe3-be07-641e87c57e49","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T16:04:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e711ff6f-4153-4fe3-be07-641e87c57e49","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"26fbefcd-1f3f-4523-899a-2d5408ecb467","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3165f2a7-c048-415b-a85c-a215d11d2af8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/05c0a92404fb"]}} {"level":"debug","ts":"2026-07-14T16:04:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e711ff6f-4153-4fe3-be07-641e87c57e49","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/05c0a92404fb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3165f2a7-c048-415b-a85c-a215d11d2af8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"26fbefcd-1f3f-4523-899a-2d5408ecb467","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"dc57175700ab457fddd972f579c87c640cdf2a48ca10c986490fc4e1ac1e4c7f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.76:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-bea800.apps.bef11670-107b-4509-941d-05c0a92404fb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T16:04:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e711ff6f-4153-4fe3-be07-641e87c57e49","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T16:04:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e711ff6f-4153-4fe3-be07-641e87c57e49","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T16:04:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e711ff6f-4153-4fe3-be07-641e87c57e49","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bea800/auth-test-model-bea800\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-bea800/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T16:04:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e711ff6f-4153-4fe3-be07-641e87c57e49","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T16:04:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e711ff6f-4153-4fe3-be07-641e87c57e49","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T16:04:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e711ff6f-4153-4fe3-be07-641e87c57e49","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T16:04:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e711ff6f-4153-4fe3-be07-641e87c57e49","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T16:04:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e711ff6f-4153-4fe3-be07-641e87c57e49","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T16:04:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ffb5df2a-044d-492b-8f2b-0333062732d4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:44602","PortSpecifier":{"PortValue":44602}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.78:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ffb5df2a-044d-492b-8f2b-0333062732d4","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-519447.apps.bef11670-107b-4509-941d-05c0a92404fb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T16:04:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ffb5df2a-044d-492b-8f2b-0333062732d4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:44602","PortSpecifier":{"PortValue":44602}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.78:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784045050,"nanos":591090468},"http":{"id":"ffb5df2a-044d-492b-8f2b-0333062732d4","method":"POST","headers":{":authority":"e2e-shared-b-519447.apps.bef11670-107b-4509-941d-05c0a92404fb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T16:04:10Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ffb5df2a-044d-492b-8f2b-0333062732d4","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T16:04:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ffb5df2a-044d-492b-8f2b-0333062732d4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"26fbefcd-1f3f-4523-899a-2d5408ecb467","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3165f2a7-c048-415b-a85c-a215d11d2af8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/05c0a92404fb"]}} {"level":"debug","ts":"2026-07-14T16:04:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ffb5df2a-044d-492b-8f2b-0333062732d4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/05c0a92404fb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3165f2a7-c048-415b-a85c-a215d11d2af8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"26fbefcd-1f3f-4523-899a-2d5408ecb467","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"adb742abf62e24188ca13a4a0042ad0643b3f82c2828972e60f568a47d164d1a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.78:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-519447.apps.bef11670-107b-4509-941d-05c0a92404fb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T16:04:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ffb5df2a-044d-492b-8f2b-0333062732d4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T16:04:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ffb5df2a-044d-492b-8f2b-0333062732d4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T16:04:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ffb5df2a-044d-492b-8f2b-0333062732d4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-519447/auth-test-model-519447\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-519447/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T16:04:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ffb5df2a-044d-492b-8f2b-0333062732d4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T16:04:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ffb5df2a-044d-492b-8f2b-0333062732d4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T16:04:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ffb5df2a-044d-492b-8f2b-0333062732d4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T16:04:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ffb5df2a-044d-492b-8f2b-0333062732d4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T16:04:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ffb5df2a-044d-492b-8f2b-0333062732d4","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T16:04:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ba257e71-dbae-4927-b0e8-b228a27233b9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:41098","PortSpecifier":{"PortValue":41098}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ba257e71-dbae-4927-b0e8-b228a27233b9","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-bea800.apps.bef11670-107b-4509-941d-05c0a92404fb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T16:04:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ba257e71-dbae-4927-b0e8-b228a27233b9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:41098","PortSpecifier":{"PortValue":41098}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784045070,"nanos":80896244},"http":{"id":"ba257e71-dbae-4927-b0e8-b228a27233b9","method":"POST","headers":{":authority":"e2e-shared-a-bea800.apps.bef11670-107b-4509-941d-05c0a92404fb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T16:04:30Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ba257e71-dbae-4927-b0e8-b228a27233b9","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T16:04:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ba257e71-dbae-4927-b0e8-b228a27233b9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"26fbefcd-1f3f-4523-899a-2d5408ecb467","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3165f2a7-c048-415b-a85c-a215d11d2af8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/05c0a92404fb"]}} {"level":"debug","ts":"2026-07-14T16:04:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ba257e71-dbae-4927-b0e8-b228a27233b9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/05c0a92404fb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3165f2a7-c048-415b-a85c-a215d11d2af8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"26fbefcd-1f3f-4523-899a-2d5408ecb467","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"dc57175700ab457fddd972f579c87c640cdf2a48ca10c986490fc4e1ac1e4c7f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.76:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-bea800.apps.bef11670-107b-4509-941d-05c0a92404fb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T16:04:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ba257e71-dbae-4927-b0e8-b228a27233b9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T16:04:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ba257e71-dbae-4927-b0e8-b228a27233b9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T16:04:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ba257e71-dbae-4927-b0e8-b228a27233b9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bea800/auth-test-model-bea800\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-bea800/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T16:04:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ba257e71-dbae-4927-b0e8-b228a27233b9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T16:04:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ba257e71-dbae-4927-b0e8-b228a27233b9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T16:04:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ba257e71-dbae-4927-b0e8-b228a27233b9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T16:04:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ba257e71-dbae-4927-b0e8-b228a27233b9","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T16:04:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ba257e71-dbae-4927-b0e8-b228a27233b9","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T16:04:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"31a6e9b0-40a0-4a48-96a7-95ff759a16af","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:47226","PortSpecifier":{"PortValue":47226}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.78:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"31a6e9b0-40a0-4a48-96a7-95ff759a16af","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-519447.apps.bef11670-107b-4509-941d-05c0a92404fb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T16:04:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"31a6e9b0-40a0-4a48-96a7-95ff759a16af","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:47226","PortSpecifier":{"PortValue":47226}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.78:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784045070,"nanos":121025141},"http":{"id":"31a6e9b0-40a0-4a48-96a7-95ff759a16af","method":"POST","headers":{":authority":"e2e-shared-b-519447.apps.bef11670-107b-4509-941d-05c0a92404fb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T16:04:30Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"31a6e9b0-40a0-4a48-96a7-95ff759a16af","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T16:04:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"31a6e9b0-40a0-4a48-96a7-95ff759a16af","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"26fbefcd-1f3f-4523-899a-2d5408ecb467","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3165f2a7-c048-415b-a85c-a215d11d2af8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/05c0a92404fb"]}} {"level":"debug","ts":"2026-07-14T16:04:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"31a6e9b0-40a0-4a48-96a7-95ff759a16af","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/05c0a92404fb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3165f2a7-c048-415b-a85c-a215d11d2af8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"26fbefcd-1f3f-4523-899a-2d5408ecb467","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"adb742abf62e24188ca13a4a0042ad0643b3f82c2828972e60f568a47d164d1a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.78:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-519447.apps.bef11670-107b-4509-941d-05c0a92404fb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T16:04:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"31a6e9b0-40a0-4a48-96a7-95ff759a16af","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T16:04:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"31a6e9b0-40a0-4a48-96a7-95ff759a16af","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T16:04:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"31a6e9b0-40a0-4a48-96a7-95ff759a16af","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-519447/auth-test-model-519447\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-519447/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T16:04:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"31a6e9b0-40a0-4a48-96a7-95ff759a16af","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T16:04:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"31a6e9b0-40a0-4a48-96a7-95ff759a16af","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T16:04:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"31a6e9b0-40a0-4a48-96a7-95ff759a16af","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-14T16:04:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"31a6e9b0-40a0-4a48-96a7-95ff759a16af","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T16:04:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"31a6e9b0-40a0-4a48-96a7-95ff759a16af","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T16:04:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0783ab5b-f151-4173-b360-7d0c1350b4a3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:47238","PortSpecifier":{"PortValue":47238}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.78:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0783ab5b-f151-4173-b360-7d0c1350b4a3","method":"GET","path":"/maas-api/v1/api-keys/220cf6e3-48cf-4995-bae9-e71b41b053cc","host":"e2e-shared-b-519447.apps.bef11670-107b-4509-941d-05c0a92404fb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T16:04:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0783ab5b-f151-4173-b360-7d0c1350b4a3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:47238","PortSpecifier":{"PortValue":47238}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.78:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784045070,"nanos":157920865},"http":{"id":"0783ab5b-f151-4173-b360-7d0c1350b4a3","method":"GET","headers":{":authority":"e2e-shared-b-519447.apps.bef11670-107b-4509-941d-05c0a92404fb.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/220cf6e3-48cf-4995-bae9-e71b41b053cc",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T16:04:30Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0783ab5b-f151-4173-b360-7d0c1350b4a3","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T16:04:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0783ab5b-f151-4173-b360-7d0c1350b4a3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"26fbefcd-1f3f-4523-899a-2d5408ecb467","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3165f2a7-c048-415b-a85c-a215d11d2af8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/05c0a92404fb"]}} {"level":"debug","ts":"2026-07-14T16:04:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0783ab5b-f151-4173-b360-7d0c1350b4a3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/05c0a92404fb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3165f2a7-c048-415b-a85c-a215d11d2af8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"26fbefcd-1f3f-4523-899a-2d5408ecb467","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"adb742abf62e24188ca13a4a0042ad0643b3f82c2828972e60f568a47d164d1a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.78:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-519447.apps.bef11670-107b-4509-941d-05c0a92404fb.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/220cf6e3-48cf-4995-bae9-e71b41b053cc",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T16:04:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0783ab5b-f151-4173-b360-7d0c1350b4a3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T16:04:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0783ab5b-f151-4173-b360-7d0c1350b4a3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T16:04:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0783ab5b-f151-4173-b360-7d0c1350b4a3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-519447/auth-test-model-519447\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-519447/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T16:04:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0783ab5b-f151-4173-b360-7d0c1350b4a3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T16:04:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0783ab5b-f151-4173-b360-7d0c1350b4a3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T16:04:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0783ab5b-f151-4173-b360-7d0c1350b4a3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-14T16:04:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0783ab5b-f151-4173-b360-7d0c1350b4a3","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T16:04:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0783ab5b-f151-4173-b360-7d0c1350b4a3","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T16:04:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4f9d8d5b-0394-4f24-8248-a8d43ba842c8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:41100","PortSpecifier":{"PortValue":41100}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4f9d8d5b-0394-4f24-8248-a8d43ba842c8","method":"GET","path":"/maas-api/v1/api-keys/220cf6e3-48cf-4995-bae9-e71b41b053cc","host":"e2e-shared-a-bea800.apps.bef11670-107b-4509-941d-05c0a92404fb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T16:04:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4f9d8d5b-0394-4f24-8248-a8d43ba842c8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:41100","PortSpecifier":{"PortValue":41100}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784045070,"nanos":186435646},"http":{"id":"4f9d8d5b-0394-4f24-8248-a8d43ba842c8","method":"GET","headers":{":authority":"e2e-shared-a-bea800.apps.bef11670-107b-4509-941d-05c0a92404fb.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/220cf6e3-48cf-4995-bae9-e71b41b053cc",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T16:04:30Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4f9d8d5b-0394-4f24-8248-a8d43ba842c8","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T16:04:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4f9d8d5b-0394-4f24-8248-a8d43ba842c8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"26fbefcd-1f3f-4523-899a-2d5408ecb467","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3165f2a7-c048-415b-a85c-a215d11d2af8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/05c0a92404fb"]}} {"level":"debug","ts":"2026-07-14T16:04:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4f9d8d5b-0394-4f24-8248-a8d43ba842c8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/05c0a92404fb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3165f2a7-c048-415b-a85c-a215d11d2af8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"26fbefcd-1f3f-4523-899a-2d5408ecb467","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"dc57175700ab457fddd972f579c87c640cdf2a48ca10c986490fc4e1ac1e4c7f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.76:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-bea800.apps.bef11670-107b-4509-941d-05c0a92404fb.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/220cf6e3-48cf-4995-bae9-e71b41b053cc",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T16:04:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4f9d8d5b-0394-4f24-8248-a8d43ba842c8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T16:04:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4f9d8d5b-0394-4f24-8248-a8d43ba842c8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T16:04:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4f9d8d5b-0394-4f24-8248-a8d43ba842c8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bea800/auth-test-model-bea800\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-bea800/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T16:04:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4f9d8d5b-0394-4f24-8248-a8d43ba842c8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T16:04:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4f9d8d5b-0394-4f24-8248-a8d43ba842c8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T16:04:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4f9d8d5b-0394-4f24-8248-a8d43ba842c8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T16:04:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4f9d8d5b-0394-4f24-8248-a8d43ba842c8","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T16:04:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4f9d8d5b-0394-4f24-8248-a8d43ba842c8","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T16:04:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5784f7e8-8ac6-4045-bc02-b08cfdf97026","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:39762","PortSpecifier":{"PortValue":39762}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5784f7e8-8ac6-4045-bc02-b08cfdf97026","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-bea800.apps.bef11670-107b-4509-941d-05c0a92404fb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T16:04:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5784f7e8-8ac6-4045-bc02-b08cfdf97026","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:39762","PortSpecifier":{"PortValue":39762}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784045089,"nanos":491210665},"http":{"id":"5784f7e8-8ac6-4045-bc02-b08cfdf97026","method":"POST","headers":{":authority":"e2e-shared-a-bea800.apps.bef11670-107b-4509-941d-05c0a92404fb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T16:04:49Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5784f7e8-8ac6-4045-bc02-b08cfdf97026","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T16:04:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5784f7e8-8ac6-4045-bc02-b08cfdf97026","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"26fbefcd-1f3f-4523-899a-2d5408ecb467","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3165f2a7-c048-415b-a85c-a215d11d2af8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/05c0a92404fb"]}} {"level":"debug","ts":"2026-07-14T16:04:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5784f7e8-8ac6-4045-bc02-b08cfdf97026","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/05c0a92404fb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3165f2a7-c048-415b-a85c-a215d11d2af8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"26fbefcd-1f3f-4523-899a-2d5408ecb467","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"dc57175700ab457fddd972f579c87c640cdf2a48ca10c986490fc4e1ac1e4c7f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.76:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-bea800.apps.bef11670-107b-4509-941d-05c0a92404fb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T16:04:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5784f7e8-8ac6-4045-bc02-b08cfdf97026","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T16:04:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5784f7e8-8ac6-4045-bc02-b08cfdf97026","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T16:04:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5784f7e8-8ac6-4045-bc02-b08cfdf97026","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bea800/auth-test-model-bea800\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-bea800/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T16:04:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5784f7e8-8ac6-4045-bc02-b08cfdf97026","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T16:04:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5784f7e8-8ac6-4045-bc02-b08cfdf97026","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T16:04:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5784f7e8-8ac6-4045-bc02-b08cfdf97026","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T16:04:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5784f7e8-8ac6-4045-bc02-b08cfdf97026","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T16:04:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5784f7e8-8ac6-4045-bc02-b08cfdf97026","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T16:04:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6a6a685f-67b7-4235-b501-95cf4cec74ad","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:33904","PortSpecifier":{"PortValue":33904}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.78:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6a6a685f-67b7-4235-b501-95cf4cec74ad","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-519447.apps.bef11670-107b-4509-941d-05c0a92404fb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T16:04:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6a6a685f-67b7-4235-b501-95cf4cec74ad","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:33904","PortSpecifier":{"PortValue":33904}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.78:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784045089,"nanos":530168405},"http":{"id":"6a6a685f-67b7-4235-b501-95cf4cec74ad","method":"POST","headers":{":authority":"e2e-shared-b-519447.apps.bef11670-107b-4509-941d-05c0a92404fb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T16:04:49Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6a6a685f-67b7-4235-b501-95cf4cec74ad","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T16:04:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6a6a685f-67b7-4235-b501-95cf4cec74ad","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"26fbefcd-1f3f-4523-899a-2d5408ecb467","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3165f2a7-c048-415b-a85c-a215d11d2af8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/05c0a92404fb"]}} {"level":"debug","ts":"2026-07-14T16:04:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6a6a685f-67b7-4235-b501-95cf4cec74ad","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/05c0a92404fb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3165f2a7-c048-415b-a85c-a215d11d2af8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"26fbefcd-1f3f-4523-899a-2d5408ecb467","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"adb742abf62e24188ca13a4a0042ad0643b3f82c2828972e60f568a47d164d1a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.78:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-519447.apps.bef11670-107b-4509-941d-05c0a92404fb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T16:04:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6a6a685f-67b7-4235-b501-95cf4cec74ad","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T16:04:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6a6a685f-67b7-4235-b501-95cf4cec74ad","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T16:04:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6a6a685f-67b7-4235-b501-95cf4cec74ad","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-519447/auth-test-model-519447\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-519447/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T16:04:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6a6a685f-67b7-4235-b501-95cf4cec74ad","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T16:04:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6a6a685f-67b7-4235-b501-95cf4cec74ad","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T16:04:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6a6a685f-67b7-4235-b501-95cf4cec74ad","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T16:04:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6a6a685f-67b7-4235-b501-95cf4cec74ad","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T16:04:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6a6a685f-67b7-4235-b501-95cf4cec74ad","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T16:04:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"28421a4f-61f9-4230-b33c-3421d6c7ae7b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:39776","PortSpecifier":{"PortValue":39776}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"28421a4f-61f9-4230-b33c-3421d6c7ae7b","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-bea800.apps.bef11670-107b-4509-941d-05c0a92404fb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T16:04:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"28421a4f-61f9-4230-b33c-3421d6c7ae7b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:39776","PortSpecifier":{"PortValue":39776}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784045089,"nanos":565721035},"http":{"id":"28421a4f-61f9-4230-b33c-3421d6c7ae7b","method":"POST","headers":{":authority":"e2e-shared-a-bea800.apps.bef11670-107b-4509-941d-05c0a92404fb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T16:04:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"28421a4f-61f9-4230-b33c-3421d6c7ae7b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1P2LI4XMGHC6tM11s_eXYkupDQh40oShhe6m9e6G6NrKDSeAbS6lMaLPhVqPs"} {"level":"debug","ts":"2026-07-14T16:04:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"28421a4f-61f9-4230-b33c-3421d6c7ae7b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-bea800.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1P2LI4XMGHC6tM11s_eXYkupDQh40oShhe6m9e6G6NrKDSeAbS6lMaLPhVqPs\"}"} {"level":"debug","ts":"2026-07-14T16:04:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"28421a4f-61f9-4230-b33c-3421d6c7ae7b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bea800.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6b6a3b6d-9e7b-44f1-8194-b6d04ee1c838","keyName":"e2e-auth-iso-a-c9da50","subscription":"e2e-auth-iso-a7db2c","tenant":"e2e-shared-a-bea800","userId":"6b6a3b6d-9e7b-44f1-8194-b6d04ee1c838","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T16:04:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"28421a4f-61f9-4230-b33c-3421d6c7ae7b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T16:04:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"28421a4f-61f9-4230-b33c-3421d6c7ae7b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T16:04:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"28421a4f-61f9-4230-b33c-3421d6c7ae7b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T16:04:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"28421a4f-61f9-4230-b33c-3421d6c7ae7b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bea800/auth-test-model-bea800\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-bea800/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T16:04:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"28421a4f-61f9-4230-b33c-3421d6c7ae7b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T16:04:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"28421a4f-61f9-4230-b33c-3421d6c7ae7b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-a7db2c"} {"level":"debug","ts":"2026-07-14T16:04:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"28421a4f-61f9-4230-b33c-3421d6c7ae7b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-14T16:04:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"28421a4f-61f9-4230-b33c-3421d6c7ae7b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T16:04:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"28421a4f-61f9-4230-b33c-3421d6c7ae7b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T16:04:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"28421a4f-61f9-4230-b33c-3421d6c7ae7b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T16:04:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ac49043e0d7c228136f5a3b6510a0e141f633e98cadf5d37e23a4a49fe633fad"} {"level":"info","ts":"2026-07-14T16:04:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/31ae94497f18583ea89ba3e064ef4f91d592df63d9300e7dfdc727a2503e8130"} {"level":"info","ts":"2026-07-14T16:04:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6aba9f1a2681b8534c96e6fda16fc27e13f5b4a0e3598e1d1285791bd10dc126"} {"level":"info","ts":"2026-07-14T16:04:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fae925f4db1097302e97024b82c55d079dcbf4e8e12d645327562e911a81092b"} {"level":"info","ts":"2026-07-14T16:04:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/11c3b7e29b576a41e55a25f17f5c56fe605906f10e9f6ff331a8eb6f574a6e45"} {"level":"info","ts":"2026-07-14T16:04:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d5001688617a116aff11cd4890bb65dfc5d06123633e0f5f54fe1fb8eea0e2b4"} {"level":"info","ts":"2026-07-14T16:04:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6ed772a3939e080d7836d6368cecfdfc4a72451afd1843839c8202bcd30be9a2"} {"level":"info","ts":"2026-07-14T16:04:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/710c3e70a5056028bb90709ceacf988578393f425c9e262a992caa7314bbb0e8"} {"level":"debug","ts":"2026-07-14T16:05:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf9a07d813d45b302fb18cd86295570e41c8c9b1fbb0adeedd18aca6bb4fd08f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:05:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:05:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:05:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf9a07d813d45b302fb18cd86295570e41c8c9b1fbb0adeedd18aca6bb4fd08f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf9a07d813d45b302fb18cd86295570e41c8c9b1fbb0adeedd18aca6bb4fd08f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf9a07d813d45b302fb18cd86295570e41c8c9b1fbb0adeedd18aca6bb4fd08f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:05:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf9a07d813d45b302fb18cd86295570e41c8c9b1fbb0adeedd18aca6bb4fd08f"} {"level":"info","ts":"2026-07-14T16:05:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf9a07d813d45b302fb18cd86295570e41c8c9b1fbb0adeedd18aca6bb4fd08f"} {"level":"debug","ts":"2026-07-14T16:05:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf9a07d813d45b302fb18cd86295570e41c8c9b1fbb0adeedd18aca6bb4fd08f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:05:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:05:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cf9a07d813d45b302fb18cd86295570e41c8c9b1fbb0adeedd18aca6bb4fd08f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:05:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf9a07d813d45b302fb18cd86295570e41c8c9b1fbb0adeedd18aca6bb4fd08f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf9a07d813d45b302fb18cd86295570e41c8c9b1fbb0adeedd18aca6bb4fd08f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:05:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:05:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:05:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf9a07d813d45b302fb18cd86295570e41c8c9b1fbb0adeedd18aca6bb4fd08f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf9a07d813d45b302fb18cd86295570e41c8c9b1fbb0adeedd18aca6bb4fd08f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf9a07d813d45b302fb18cd86295570e41c8c9b1fbb0adeedd18aca6bb4fd08f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:05:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf9a07d813d45b302fb18cd86295570e41c8c9b1fbb0adeedd18aca6bb4fd08f"} {"level":"debug","ts":"2026-07-14T16:05:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf9a07d813d45b302fb18cd86295570e41c8c9b1fbb0adeedd18aca6bb4fd08f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:05:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf9a07d813d45b302fb18cd86295570e41c8c9b1fbb0adeedd18aca6bb4fd08f"} {"level":"debug","ts":"2026-07-14T16:05:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf9a07d813d45b302fb18cd86295570e41c8c9b1fbb0adeedd18aca6bb4fd08f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:05:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:05:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cf9a07d813d45b302fb18cd86295570e41c8c9b1fbb0adeedd18aca6bb4fd08f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:05:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf9a07d813d45b302fb18cd86295570e41c8c9b1fbb0adeedd18aca6bb4fd08f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf9a07d813d45b302fb18cd86295570e41c8c9b1fbb0adeedd18aca6bb4fd08f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:05:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf9a07d813d45b302fb18cd86295570e41c8c9b1fbb0adeedd18aca6bb4fd08f"} {"level":"debug","ts":"2026-07-14T16:05:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b61db41c17c4454ff0da2df1ca171d5aac4d011900ab21f640634a9879ddbfc0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:05:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:05:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:05:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b61db41c17c4454ff0da2df1ca171d5aac4d011900ab21f640634a9879ddbfc0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b61db41c17c4454ff0da2df1ca171d5aac4d011900ab21f640634a9879ddbfc0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:05:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:05:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:05:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b61db41c17c4454ff0da2df1ca171d5aac4d011900ab21f640634a9879ddbfc0"} {"level":"info","ts":"2026-07-14T16:05:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b61db41c17c4454ff0da2df1ca171d5aac4d011900ab21f640634a9879ddbfc0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b61db41c17c4454ff0da2df1ca171d5aac4d011900ab21f640634a9879ddbfc0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:05:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:05:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-14T16:05:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b61db41c17c4454ff0da2df1ca171d5aac4d011900ab21f640634a9879ddbfc0","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b61db41c17c4454ff0da2df1ca171d5aac4d011900ab21f640634a9879ddbfc0\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T16:05:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b61db41c17c4454ff0da2df1ca171d5aac4d011900ab21f640634a9879ddbfc0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b61db41c17c4454ff0da2df1ca171d5aac4d011900ab21f640634a9879ddbfc0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:05:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b61db41c17c4454ff0da2df1ca171d5aac4d011900ab21f640634a9879ddbfc0"} {"level":"info","ts":"2026-07-14T16:05:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b61db41c17c4454ff0da2df1ca171d5aac4d011900ab21f640634a9879ddbfc0"} {"level":"debug","ts":"2026-07-14T16:05:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02e87055c21d19238449f069afd6a7fc72ca793b39e82edc9337db2aac7216be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:05:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:05:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:05:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02e87055c21d19238449f069afd6a7fc72ca793b39e82edc9337db2aac7216be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02e87055c21d19238449f069afd6a7fc72ca793b39e82edc9337db2aac7216be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02e87055c21d19238449f069afd6a7fc72ca793b39e82edc9337db2aac7216be","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:05:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02e87055c21d19238449f069afd6a7fc72ca793b39e82edc9337db2aac7216be"} {"level":"debug","ts":"2026-07-14T16:05:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b61db41c17c4454ff0da2df1ca171d5aac4d011900ab21f640634a9879ddbfc0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:05:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:05:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b61db41c17c4454ff0da2df1ca171d5aac4d011900ab21f640634a9879ddbfc0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:05:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b61db41c17c4454ff0da2df1ca171d5aac4d011900ab21f640634a9879ddbfc0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b61db41c17c4454ff0da2df1ca171d5aac4d011900ab21f640634a9879ddbfc0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02e87055c21d19238449f069afd6a7fc72ca793b39e82edc9337db2aac7216be","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:05:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02e87055c21d19238449f069afd6a7fc72ca793b39e82edc9337db2aac7216be"} {"level":"info","ts":"2026-07-14T16:05:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b61db41c17c4454ff0da2df1ca171d5aac4d011900ab21f640634a9879ddbfc0"} {"level":"debug","ts":"2026-07-14T16:05:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02e87055c21d19238449f069afd6a7fc72ca793b39e82edc9337db2aac7216be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:05:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:05:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["02e87055c21d19238449f069afd6a7fc72ca793b39e82edc9337db2aac7216be"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:05:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02e87055c21d19238449f069afd6a7fc72ca793b39e82edc9337db2aac7216be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02e87055c21d19238449f069afd6a7fc72ca793b39e82edc9337db2aac7216be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"45388ac6293eda7f276dee5c282dd1976021374bd88cf0a07789b42e3dee7e1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:05:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:05:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:05:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"45388ac6293eda7f276dee5c282dd1976021374bd88cf0a07789b42e3dee7e1f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"45388ac6293eda7f276dee5c282dd1976021374bd88cf0a07789b42e3dee7e1f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"45388ac6293eda7f276dee5c282dd1976021374bd88cf0a07789b42e3dee7e1f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:05:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02e87055c21d19238449f069afd6a7fc72ca793b39e82edc9337db2aac7216be"} {"level":"debug","ts":"2026-07-14T16:05:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"45388ac6293eda7f276dee5c282dd1976021374bd88cf0a07789b42e3dee7e1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:05:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:05:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:05:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"45388ac6293eda7f276dee5c282dd1976021374bd88cf0a07789b42e3dee7e1f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:05:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45388ac6293eda7f276dee5c282dd1976021374bd88cf0a07789b42e3dee7e1f"} {"level":"debug","ts":"2026-07-14T16:05:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"45388ac6293eda7f276dee5c282dd1976021374bd88cf0a07789b42e3dee7e1f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:05:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45388ac6293eda7f276dee5c282dd1976021374bd88cf0a07789b42e3dee7e1f"} {"level":"debug","ts":"2026-07-14T16:05:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"45388ac6293eda7f276dee5c282dd1976021374bd88cf0a07789b42e3dee7e1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:05:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:05:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["45388ac6293eda7f276dee5c282dd1976021374bd88cf0a07789b42e3dee7e1f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:05:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"45388ac6293eda7f276dee5c282dd1976021374bd88cf0a07789b42e3dee7e1f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"45388ac6293eda7f276dee5c282dd1976021374bd88cf0a07789b42e3dee7e1f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:05:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45388ac6293eda7f276dee5c282dd1976021374bd88cf0a07789b42e3dee7e1f"} {"level":"debug","ts":"2026-07-14T16:05:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8cd55675ad00887e8bd34ed206eedd93f6ffbb8d903103fa7ad9002e2d456b5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:05:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:05:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:05:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8cd55675ad00887e8bd34ed206eedd93f6ffbb8d903103fa7ad9002e2d456b5c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8cd55675ad00887e8bd34ed206eedd93f6ffbb8d903103fa7ad9002e2d456b5c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8cd55675ad00887e8bd34ed206eedd93f6ffbb8d903103fa7ad9002e2d456b5c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:05:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8cd55675ad00887e8bd34ed206eedd93f6ffbb8d903103fa7ad9002e2d456b5c"} {"level":"debug","ts":"2026-07-14T16:05:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8cd55675ad00887e8bd34ed206eedd93f6ffbb8d903103fa7ad9002e2d456b5c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:05:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8cd55675ad00887e8bd34ed206eedd93f6ffbb8d903103fa7ad9002e2d456b5c"} {"level":"debug","ts":"2026-07-14T16:05:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8cd55675ad00887e8bd34ed206eedd93f6ffbb8d903103fa7ad9002e2d456b5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:05:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:05:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8cd55675ad00887e8bd34ed206eedd93f6ffbb8d903103fa7ad9002e2d456b5c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:05:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8cd55675ad00887e8bd34ed206eedd93f6ffbb8d903103fa7ad9002e2d456b5c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8cd55675ad00887e8bd34ed206eedd93f6ffbb8d903103fa7ad9002e2d456b5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:05:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:05:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:05:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8cd55675ad00887e8bd34ed206eedd93f6ffbb8d903103fa7ad9002e2d456b5c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"098e45ab7c8e81a56b17edc2511a9c0ec1f53e111f7ce44ec31d20962946041b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:05:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:05:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:05:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8cd55675ad00887e8bd34ed206eedd93f6ffbb8d903103fa7ad9002e2d456b5c"} {"level":"info","ts":"2026-07-14T16:05:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"098e45ab7c8e81a56b17edc2511a9c0ec1f53e111f7ce44ec31d20962946041b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8cd55675ad00887e8bd34ed206eedd93f6ffbb8d903103fa7ad9002e2d456b5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:05:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:05:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8cd55675ad00887e8bd34ed206eedd93f6ffbb8d903103fa7ad9002e2d456b5c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:05:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8cd55675ad00887e8bd34ed206eedd93f6ffbb8d903103fa7ad9002e2d456b5c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"098e45ab7c8e81a56b17edc2511a9c0ec1f53e111f7ce44ec31d20962946041b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:05:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:05:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:05:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/098e45ab7c8e81a56b17edc2511a9c0ec1f53e111f7ce44ec31d20962946041b"} {"level":"info","ts":"2026-07-14T16:05:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"098e45ab7c8e81a56b17edc2511a9c0ec1f53e111f7ce44ec31d20962946041b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8cd55675ad00887e8bd34ed206eedd93f6ffbb8d903103fa7ad9002e2d456b5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:05:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:05:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:05:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8cd55675ad00887e8bd34ed206eedd93f6ffbb8d903103fa7ad9002e2d456b5c"} {"level":"info","ts":"2026-07-14T16:05:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8cd55675ad00887e8bd34ed206eedd93f6ffbb8d903103fa7ad9002e2d456b5c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"098e45ab7c8e81a56b17edc2511a9c0ec1f53e111f7ce44ec31d20962946041b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8cd55675ad00887e8bd34ed206eedd93f6ffbb8d903103fa7ad9002e2d456b5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:05:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:05:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8cd55675ad00887e8bd34ed206eedd93f6ffbb8d903103fa7ad9002e2d456b5c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:05:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8cd55675ad00887e8bd34ed206eedd93f6ffbb8d903103fa7ad9002e2d456b5c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8cd55675ad00887e8bd34ed206eedd93f6ffbb8d903103fa7ad9002e2d456b5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:05:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:05:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8cd55675ad00887e8bd34ed206eedd93f6ffbb8d903103fa7ad9002e2d456b5c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-14T16:05:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"8cd55675ad00887e8bd34ed206eedd93f6ffbb8d903103fa7ad9002e2d456b5c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"8cd55675ad00887e8bd34ed206eedd93f6ffbb8d903103fa7ad9002e2d456b5c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T16:05:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8cd55675ad00887e8bd34ed206eedd93f6ffbb8d903103fa7ad9002e2d456b5c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:05:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/098e45ab7c8e81a56b17edc2511a9c0ec1f53e111f7ce44ec31d20962946041b"} {"level":"debug","ts":"2026-07-14T16:05:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"098e45ab7c8e81a56b17edc2511a9c0ec1f53e111f7ce44ec31d20962946041b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:05:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:05:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["098e45ab7c8e81a56b17edc2511a9c0ec1f53e111f7ce44ec31d20962946041b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:05:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"098e45ab7c8e81a56b17edc2511a9c0ec1f53e111f7ce44ec31d20962946041b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8cd55675ad00887e8bd34ed206eedd93f6ffbb8d903103fa7ad9002e2d456b5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:05:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:05:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:05:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8cd55675ad00887e8bd34ed206eedd93f6ffbb8d903103fa7ad9002e2d456b5c"} {"level":"info","ts":"2026-07-14T16:05:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8cd55675ad00887e8bd34ed206eedd93f6ffbb8d903103fa7ad9002e2d456b5c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"098e45ab7c8e81a56b17edc2511a9c0ec1f53e111f7ce44ec31d20962946041b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:05:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:05:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:05:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/098e45ab7c8e81a56b17edc2511a9c0ec1f53e111f7ce44ec31d20962946041b"} {"level":"info","ts":"2026-07-14T16:05:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"098e45ab7c8e81a56b17edc2511a9c0ec1f53e111f7ce44ec31d20962946041b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8cd55675ad00887e8bd34ed206eedd93f6ffbb8d903103fa7ad9002e2d456b5c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"098e45ab7c8e81a56b17edc2511a9c0ec1f53e111f7ce44ec31d20962946041b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:05:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:05:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["098e45ab7c8e81a56b17edc2511a9c0ec1f53e111f7ce44ec31d20962946041b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:05:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"098e45ab7c8e81a56b17edc2511a9c0ec1f53e111f7ce44ec31d20962946041b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8cd55675ad00887e8bd34ed206eedd93f6ffbb8d903103fa7ad9002e2d456b5c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"098e45ab7c8e81a56b17edc2511a9c0ec1f53e111f7ce44ec31d20962946041b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:05:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:05:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["098e45ab7c8e81a56b17edc2511a9c0ec1f53e111f7ce44ec31d20962946041b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-14T16:05:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"098e45ab7c8e81a56b17edc2511a9c0ec1f53e111f7ce44ec31d20962946041b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"098e45ab7c8e81a56b17edc2511a9c0ec1f53e111f7ce44ec31d20962946041b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T16:05:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"098e45ab7c8e81a56b17edc2511a9c0ec1f53e111f7ce44ec31d20962946041b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:05:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8cd55675ad00887e8bd34ed206eedd93f6ffbb8d903103fa7ad9002e2d456b5c"} {"level":"debug","ts":"2026-07-14T16:05:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"098e45ab7c8e81a56b17edc2511a9c0ec1f53e111f7ce44ec31d20962946041b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:05:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:05:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:05:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"098e45ab7c8e81a56b17edc2511a9c0ec1f53e111f7ce44ec31d20962946041b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8cd55675ad00887e8bd34ed206eedd93f6ffbb8d903103fa7ad9002e2d456b5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:05:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:05:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8cd55675ad00887e8bd34ed206eedd93f6ffbb8d903103fa7ad9002e2d456b5c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:05:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/098e45ab7c8e81a56b17edc2511a9c0ec1f53e111f7ce44ec31d20962946041b"} {"level":"info","ts":"2026-07-14T16:05:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8cd55675ad00887e8bd34ed206eedd93f6ffbb8d903103fa7ad9002e2d456b5c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"098e45ab7c8e81a56b17edc2511a9c0ec1f53e111f7ce44ec31d20962946041b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8cd55675ad00887e8bd34ed206eedd93f6ffbb8d903103fa7ad9002e2d456b5c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"098e45ab7c8e81a56b17edc2511a9c0ec1f53e111f7ce44ec31d20962946041b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:05:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/098e45ab7c8e81a56b17edc2511a9c0ec1f53e111f7ce44ec31d20962946041b"} {"level":"debug","ts":"2026-07-14T16:05:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"098e45ab7c8e81a56b17edc2511a9c0ec1f53e111f7ce44ec31d20962946041b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:05:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:05:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["098e45ab7c8e81a56b17edc2511a9c0ec1f53e111f7ce44ec31d20962946041b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:05:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8cd55675ad00887e8bd34ed206eedd93f6ffbb8d903103fa7ad9002e2d456b5c"} {"level":"info","ts":"2026-07-14T16:05:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"098e45ab7c8e81a56b17edc2511a9c0ec1f53e111f7ce44ec31d20962946041b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e4a399330e8bfbfe0294ff93ffe5c8b43cf62c6f4e3837ba3986c5f5248cfa7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:05:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:05:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:05:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e4a399330e8bfbfe0294ff93ffe5c8b43cf62c6f4e3837ba3986c5f5248cfa7"} {"level":"info","ts":"2026-07-14T16:05:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e4a399330e8bfbfe0294ff93ffe5c8b43cf62c6f4e3837ba3986c5f5248cfa7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"098e45ab7c8e81a56b17edc2511a9c0ec1f53e111f7ce44ec31d20962946041b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:05:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:05:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:05:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"098e45ab7c8e81a56b17edc2511a9c0ec1f53e111f7ce44ec31d20962946041b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e4a399330e8bfbfe0294ff93ffe5c8b43cf62c6f4e3837ba3986c5f5248cfa7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:05:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:05:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6e4a399330e8bfbfe0294ff93ffe5c8b43cf62c6f4e3837ba3986c5f5248cfa7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:05:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/098e45ab7c8e81a56b17edc2511a9c0ec1f53e111f7ce44ec31d20962946041b"} {"level":"info","ts":"2026-07-14T16:05:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e4a399330e8bfbfe0294ff93ffe5c8b43cf62c6f4e3837ba3986c5f5248cfa7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"098e45ab7c8e81a56b17edc2511a9c0ec1f53e111f7ce44ec31d20962946041b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:05:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:05:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["098e45ab7c8e81a56b17edc2511a9c0ec1f53e111f7ce44ec31d20962946041b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:05:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"098e45ab7c8e81a56b17edc2511a9c0ec1f53e111f7ce44ec31d20962946041b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e4a399330e8bfbfe0294ff93ffe5c8b43cf62c6f4e3837ba3986c5f5248cfa7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:05:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:05:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:05:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e4a399330e8bfbfe0294ff93ffe5c8b43cf62c6f4e3837ba3986c5f5248cfa7"} {"level":"info","ts":"2026-07-14T16:05:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e4a399330e8bfbfe0294ff93ffe5c8b43cf62c6f4e3837ba3986c5f5248cfa7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"098e45ab7c8e81a56b17edc2511a9c0ec1f53e111f7ce44ec31d20962946041b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:05:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:05:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:05:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/098e45ab7c8e81a56b17edc2511a9c0ec1f53e111f7ce44ec31d20962946041b"} {"level":"info","ts":"2026-07-14T16:05:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"098e45ab7c8e81a56b17edc2511a9c0ec1f53e111f7ce44ec31d20962946041b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e4a399330e8bfbfe0294ff93ffe5c8b43cf62c6f4e3837ba3986c5f5248cfa7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"098e45ab7c8e81a56b17edc2511a9c0ec1f53e111f7ce44ec31d20962946041b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:05:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:05:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["098e45ab7c8e81a56b17edc2511a9c0ec1f53e111f7ce44ec31d20962946041b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:05:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e4a399330e8bfbfe0294ff93ffe5c8b43cf62c6f4e3837ba3986c5f5248cfa7"} {"level":"info","ts":"2026-07-14T16:05:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"098e45ab7c8e81a56b17edc2511a9c0ec1f53e111f7ce44ec31d20962946041b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e4a399330e8bfbfe0294ff93ffe5c8b43cf62c6f4e3837ba3986c5f5248cfa7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:05:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:05:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6e4a399330e8bfbfe0294ff93ffe5c8b43cf62c6f4e3837ba3986c5f5248cfa7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:05:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/098e45ab7c8e81a56b17edc2511a9c0ec1f53e111f7ce44ec31d20962946041b"} {"level":"info","ts":"2026-07-14T16:05:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e4a399330e8bfbfe0294ff93ffe5c8b43cf62c6f4e3837ba3986c5f5248cfa7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"098e45ab7c8e81a56b17edc2511a9c0ec1f53e111f7ce44ec31d20962946041b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:05:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:05:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:05:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/098e45ab7c8e81a56b17edc2511a9c0ec1f53e111f7ce44ec31d20962946041b"} {"level":"info","ts":"2026-07-14T16:05:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"098e45ab7c8e81a56b17edc2511a9c0ec1f53e111f7ce44ec31d20962946041b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e4a399330e8bfbfe0294ff93ffe5c8b43cf62c6f4e3837ba3986c5f5248cfa7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:05:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:05:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:05:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e4a399330e8bfbfe0294ff93ffe5c8b43cf62c6f4e3837ba3986c5f5248cfa7"} {"level":"info","ts":"2026-07-14T16:05:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e4a399330e8bfbfe0294ff93ffe5c8b43cf62c6f4e3837ba3986c5f5248cfa7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"098e45ab7c8e81a56b17edc2511a9c0ec1f53e111f7ce44ec31d20962946041b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e4a399330e8bfbfe0294ff93ffe5c8b43cf62c6f4e3837ba3986c5f5248cfa7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:05:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:05:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6e4a399330e8bfbfe0294ff93ffe5c8b43cf62c6f4e3837ba3986c5f5248cfa7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:05:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/098e45ab7c8e81a56b17edc2511a9c0ec1f53e111f7ce44ec31d20962946041b"} {"level":"info","ts":"2026-07-14T16:05:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e4a399330e8bfbfe0294ff93ffe5c8b43cf62c6f4e3837ba3986c5f5248cfa7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"098e45ab7c8e81a56b17edc2511a9c0ec1f53e111f7ce44ec31d20962946041b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:05:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:05:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["098e45ab7c8e81a56b17edc2511a9c0ec1f53e111f7ce44ec31d20962946041b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:05:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e4a399330e8bfbfe0294ff93ffe5c8b43cf62c6f4e3837ba3986c5f5248cfa7"} {"level":"info","ts":"2026-07-14T16:05:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"098e45ab7c8e81a56b17edc2511a9c0ec1f53e111f7ce44ec31d20962946041b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e4a399330e8bfbfe0294ff93ffe5c8b43cf62c6f4e3837ba3986c5f5248cfa7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d50d0518d60eb8c99f8d462cda08d0ac60146ffb082ae34b6c4d61fb813cef7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:05:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:05:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:05:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d50d0518d60eb8c99f8d462cda08d0ac60146ffb082ae34b6c4d61fb813cef7"} {"level":"info","ts":"2026-07-14T16:05:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d50d0518d60eb8c99f8d462cda08d0ac60146ffb082ae34b6c4d61fb813cef7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"098e45ab7c8e81a56b17edc2511a9c0ec1f53e111f7ce44ec31d20962946041b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d50d0518d60eb8c99f8d462cda08d0ac60146ffb082ae34b6c4d61fb813cef7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:05:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:05:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1d50d0518d60eb8c99f8d462cda08d0ac60146ffb082ae34b6c4d61fb813cef7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:05:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e4a399330e8bfbfe0294ff93ffe5c8b43cf62c6f4e3837ba3986c5f5248cfa7"} {"level":"info","ts":"2026-07-14T16:05:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d50d0518d60eb8c99f8d462cda08d0ac60146ffb082ae34b6c4d61fb813cef7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d50d0518d60eb8c99f8d462cda08d0ac60146ffb082ae34b6c4d61fb813cef7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:05:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:05:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1d50d0518d60eb8c99f8d462cda08d0ac60146ffb082ae34b6c4d61fb813cef7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-14T16:05:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1d50d0518d60eb8c99f8d462cda08d0ac60146ffb082ae34b6c4d61fb813cef7","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1d50d0518d60eb8c99f8d462cda08d0ac60146ffb082ae34b6c4d61fb813cef7\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T16:05:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d50d0518d60eb8c99f8d462cda08d0ac60146ffb082ae34b6c4d61fb813cef7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d50d0518d60eb8c99f8d462cda08d0ac60146ffb082ae34b6c4d61fb813cef7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:05:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/098e45ab7c8e81a56b17edc2511a9c0ec1f53e111f7ce44ec31d20962946041b"} {"level":"info","ts":"2026-07-14T16:05:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d50d0518d60eb8c99f8d462cda08d0ac60146ffb082ae34b6c4d61fb813cef7"} {"level":"info","ts":"2026-07-14T16:05:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/78a5a278d297266bc93fa0b0dd5b34607e74e6d5ee0f112e3325a4adecd1aa46"} {"level":"info","ts":"2026-07-14T16:05:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ed3e5321965a85fd4e5ab344fb21c3420c9a2d24f290b35bd2370373b216f4de"} {"level":"info","ts":"2026-07-14T16:05:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8f7f14dee0a9e932be52dcbfc94b3ac02dfaa588bc3d30c01db4362ef6d70dc2"} {"level":"info","ts":"2026-07-14T16:05:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0aca85dc8bc9d6da6e14680fd60d4ef4263faa9d9bc2cf920c441f53a5c3375c"} {"level":"info","ts":"2026-07-14T16:05:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bbfe627189dfb4eed6cee326659b9a166ed32b6bff7d85137f1d7bd54b3ec723"} {"level":"info","ts":"2026-07-14T16:05:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eea4780af36b2becfd92eaca989d3f6c565c2e2cea37415afb6d63a4dc402b6c"} {"level":"info","ts":"2026-07-14T16:05:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cfb592462f2243bb8146a7ac02bf262c9140c80f4e689d21fe742db177c95a49"} {"level":"info","ts":"2026-07-14T16:05:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bca8a52cc0a70f356ddfd0bb90f5ad52a8547b7acaa9dec3745429cc7b1d89bf"} {"level":"debug","ts":"2026-07-14T16:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81fe7ed6d4b87742a973dbe96bf9f9146dd55fe744e083f173a9a945c2d98157","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:05:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:05:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81fe7ed6d4b87742a973dbe96bf9f9146dd55fe744e083f173a9a945c2d98157","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81fe7ed6d4b87742a973dbe96bf9f9146dd55fe744e083f173a9a945c2d98157","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81fe7ed6d4b87742a973dbe96bf9f9146dd55fe744e083f173a9a945c2d98157","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81fe7ed6d4b87742a973dbe96bf9f9146dd55fe744e083f173a9a945c2d98157"} {"level":"debug","ts":"2026-07-14T16:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81fe7ed6d4b87742a973dbe96bf9f9146dd55fe744e083f173a9a945c2d98157","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81fe7ed6d4b87742a973dbe96bf9f9146dd55fe744e083f173a9a945c2d98157"} {"level":"debug","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81fe7ed6d4b87742a973dbe96bf9f9146dd55fe744e083f173a9a945c2d98157","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:05:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:05:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81fe7ed6d4b87742a973dbe96bf9f9146dd55fe744e083f173a9a945c2d98157"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81fe7ed6d4b87742a973dbe96bf9f9146dd55fe744e083f173a9a945c2d98157","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81fe7ed6d4b87742a973dbe96bf9f9146dd55fe744e083f173a9a945c2d98157","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:05:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:05:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81fe7ed6d4b87742a973dbe96bf9f9146dd55fe744e083f173a9a945c2d98157","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81fe7ed6d4b87742a973dbe96bf9f9146dd55fe744e083f173a9a945c2d98157","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81fe7ed6d4b87742a973dbe96bf9f9146dd55fe744e083f173a9a945c2d98157"} {"level":"debug","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81fe7ed6d4b87742a973dbe96bf9f9146dd55fe744e083f173a9a945c2d98157","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81fe7ed6d4b87742a973dbe96bf9f9146dd55fe744e083f173a9a945c2d98157"} {"level":"debug","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81fe7ed6d4b87742a973dbe96bf9f9146dd55fe744e083f173a9a945c2d98157","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:05:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:05:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81fe7ed6d4b87742a973dbe96bf9f9146dd55fe744e083f173a9a945c2d98157"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81fe7ed6d4b87742a973dbe96bf9f9146dd55fe744e083f173a9a945c2d98157","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81fe7ed6d4b87742a973dbe96bf9f9146dd55fe744e083f173a9a945c2d98157","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:05:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:05:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81fe7ed6d4b87742a973dbe96bf9f9146dd55fe744e083f173a9a945c2d98157","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81fe7ed6d4b87742a973dbe96bf9f9146dd55fe744e083f173a9a945c2d98157","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81fe7ed6d4b87742a973dbe96bf9f9146dd55fe744e083f173a9a945c2d98157"} {"level":"debug","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81fe7ed6d4b87742a973dbe96bf9f9146dd55fe744e083f173a9a945c2d98157","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81fe7ed6d4b87742a973dbe96bf9f9146dd55fe744e083f173a9a945c2d98157"} {"level":"debug","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81fe7ed6d4b87742a973dbe96bf9f9146dd55fe744e083f173a9a945c2d98157","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:05:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:05:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81fe7ed6d4b87742a973dbe96bf9f9146dd55fe744e083f173a9a945c2d98157"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81fe7ed6d4b87742a973dbe96bf9f9146dd55fe744e083f173a9a945c2d98157","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81fe7ed6d4b87742a973dbe96bf9f9146dd55fe744e083f173a9a945c2d98157","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:05:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:05:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81fe7ed6d4b87742a973dbe96bf9f9146dd55fe744e083f173a9a945c2d98157","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2aa4e66b6d33a84150dab0415946341e0eaeacfe92a239e5126084018f864bc7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:05:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:05:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81fe7ed6d4b87742a973dbe96bf9f9146dd55fe744e083f173a9a945c2d98157"} {"level":"info","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2aa4e66b6d33a84150dab0415946341e0eaeacfe92a239e5126084018f864bc7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81fe7ed6d4b87742a973dbe96bf9f9146dd55fe744e083f173a9a945c2d98157","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:05:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:05:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81fe7ed6d4b87742a973dbe96bf9f9146dd55fe744e083f173a9a945c2d98157"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81fe7ed6d4b87742a973dbe96bf9f9146dd55fe744e083f173a9a945c2d98157","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2aa4e66b6d33a84150dab0415946341e0eaeacfe92a239e5126084018f864bc7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:05:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:05:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2aa4e66b6d33a84150dab0415946341e0eaeacfe92a239e5126084018f864bc7"} {"level":"info","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2aa4e66b6d33a84150dab0415946341e0eaeacfe92a239e5126084018f864bc7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81fe7ed6d4b87742a973dbe96bf9f9146dd55fe744e083f173a9a945c2d98157","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:05:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:05:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81fe7ed6d4b87742a973dbe96bf9f9146dd55fe744e083f173a9a945c2d98157"} {"level":"info","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81fe7ed6d4b87742a973dbe96bf9f9146dd55fe744e083f173a9a945c2d98157","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2aa4e66b6d33a84150dab0415946341e0eaeacfe92a239e5126084018f864bc7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81fe7ed6d4b87742a973dbe96bf9f9146dd55fe744e083f173a9a945c2d98157","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:05:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:05:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81fe7ed6d4b87742a973dbe96bf9f9146dd55fe744e083f173a9a945c2d98157"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81fe7ed6d4b87742a973dbe96bf9f9146dd55fe744e083f173a9a945c2d98157","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81fe7ed6d4b87742a973dbe96bf9f9146dd55fe744e083f173a9a945c2d98157","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:05:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:05:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81fe7ed6d4b87742a973dbe96bf9f9146dd55fe744e083f173a9a945c2d98157"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2aa4e66b6d33a84150dab0415946341e0eaeacfe92a239e5126084018f864bc7"} {"level":"error","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"81fe7ed6d4b87742a973dbe96bf9f9146dd55fe744e083f173a9a945c2d98157","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"81fe7ed6d4b87742a973dbe96bf9f9146dd55fe744e083f173a9a945c2d98157\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2aa4e66b6d33a84150dab0415946341e0eaeacfe92a239e5126084018f864bc7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:05:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:05:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2aa4e66b6d33a84150dab0415946341e0eaeacfe92a239e5126084018f864bc7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2aa4e66b6d33a84150dab0415946341e0eaeacfe92a239e5126084018f864bc7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81fe7ed6d4b87742a973dbe96bf9f9146dd55fe744e083f173a9a945c2d98157","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:05:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:05:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81fe7ed6d4b87742a973dbe96bf9f9146dd55fe744e083f173a9a945c2d98157"} {"level":"info","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81fe7ed6d4b87742a973dbe96bf9f9146dd55fe744e083f173a9a945c2d98157","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2aa4e66b6d33a84150dab0415946341e0eaeacfe92a239e5126084018f864bc7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:05:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:05:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2aa4e66b6d33a84150dab0415946341e0eaeacfe92a239e5126084018f864bc7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81fe7ed6d4b87742a973dbe96bf9f9146dd55fe744e083f173a9a945c2d98157","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:05:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:05:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81fe7ed6d4b87742a973dbe96bf9f9146dd55fe744e083f173a9a945c2d98157"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2aa4e66b6d33a84150dab0415946341e0eaeacfe92a239e5126084018f864bc7"} {"level":"info","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81fe7ed6d4b87742a973dbe96bf9f9146dd55fe744e083f173a9a945c2d98157","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2aa4e66b6d33a84150dab0415946341e0eaeacfe92a239e5126084018f864bc7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:05:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:05:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2aa4e66b6d33a84150dab0415946341e0eaeacfe92a239e5126084018f864bc7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2aa4e66b6d33a84150dab0415946341e0eaeacfe92a239e5126084018f864bc7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81fe7ed6d4b87742a973dbe96bf9f9146dd55fe744e083f173a9a945c2d98157","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:05:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:05:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81fe7ed6d4b87742a973dbe96bf9f9146dd55fe744e083f173a9a945c2d98157","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2aa4e66b6d33a84150dab0415946341e0eaeacfe92a239e5126084018f864bc7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81fe7ed6d4b87742a973dbe96bf9f9146dd55fe744e083f173a9a945c2d98157","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81fe7ed6d4b87742a973dbe96bf9f9146dd55fe744e083f173a9a945c2d98157"} {"level":"debug","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81fe7ed6d4b87742a973dbe96bf9f9146dd55fe744e083f173a9a945c2d98157","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:05:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:05:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81fe7ed6d4b87742a973dbe96bf9f9146dd55fe744e083f173a9a945c2d98157"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81fe7ed6d4b87742a973dbe96bf9f9146dd55fe744e083f173a9a945c2d98157","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81fe7ed6d4b87742a973dbe96bf9f9146dd55fe744e083f173a9a945c2d98157","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2aa4e66b6d33a84150dab0415946341e0eaeacfe92a239e5126084018f864bc7"} {"level":"info","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81fe7ed6d4b87742a973dbe96bf9f9146dd55fe744e083f173a9a945c2d98157"} {"level":"debug","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"313474d0eb5021f593ac7e45cbf442b136a9526bdfe8f8a1108d330b10e073f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:05:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:05:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"313474d0eb5021f593ac7e45cbf442b136a9526bdfe8f8a1108d330b10e073f6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"313474d0eb5021f593ac7e45cbf442b136a9526bdfe8f8a1108d330b10e073f6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"313474d0eb5021f593ac7e45cbf442b136a9526bdfe8f8a1108d330b10e073f6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/313474d0eb5021f593ac7e45cbf442b136a9526bdfe8f8a1108d330b10e073f6"} {"level":"debug","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"313474d0eb5021f593ac7e45cbf442b136a9526bdfe8f8a1108d330b10e073f6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/313474d0eb5021f593ac7e45cbf442b136a9526bdfe8f8a1108d330b10e073f6"} {"level":"debug","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"313474d0eb5021f593ac7e45cbf442b136a9526bdfe8f8a1108d330b10e073f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:05:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:05:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["313474d0eb5021f593ac7e45cbf442b136a9526bdfe8f8a1108d330b10e073f6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"313474d0eb5021f593ac7e45cbf442b136a9526bdfe8f8a1108d330b10e073f6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"313474d0eb5021f593ac7e45cbf442b136a9526bdfe8f8a1108d330b10e073f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:05:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:05:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/313474d0eb5021f593ac7e45cbf442b136a9526bdfe8f8a1108d330b10e073f6"} {"level":"info","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"313474d0eb5021f593ac7e45cbf442b136a9526bdfe8f8a1108d330b10e073f6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5f88fb8a089d2ca0826b51b721793bbb0c6cb7e0627dffe9800432d810566f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:05:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:05:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5f88fb8a089d2ca0826b51b721793bbb0c6cb7e0627dffe9800432d810566f5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"313474d0eb5021f593ac7e45cbf442b136a9526bdfe8f8a1108d330b10e073f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:05:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:05:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["313474d0eb5021f593ac7e45cbf442b136a9526bdfe8f8a1108d330b10e073f6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5f88fb8a089d2ca0826b51b721793bbb0c6cb7e0627dffe9800432d810566f5"} {"level":"info","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"313474d0eb5021f593ac7e45cbf442b136a9526bdfe8f8a1108d330b10e073f6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5f88fb8a089d2ca0826b51b721793bbb0c6cb7e0627dffe9800432d810566f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:05:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:05:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e5f88fb8a089d2ca0826b51b721793bbb0c6cb7e0627dffe9800432d810566f5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/313474d0eb5021f593ac7e45cbf442b136a9526bdfe8f8a1108d330b10e073f6"} {"level":"info","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5f88fb8a089d2ca0826b51b721793bbb0c6cb7e0627dffe9800432d810566f5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"313474d0eb5021f593ac7e45cbf442b136a9526bdfe8f8a1108d330b10e073f6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5f88fb8a089d2ca0826b51b721793bbb0c6cb7e0627dffe9800432d810566f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:05:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:05:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5f88fb8a089d2ca0826b51b721793bbb0c6cb7e0627dffe9800432d810566f5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5f88fb8a089d2ca0826b51b721793bbb0c6cb7e0627dffe9800432d810566f5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5f88fb8a089d2ca0826b51b721793bbb0c6cb7e0627dffe9800432d810566f5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5f88fb8a089d2ca0826b51b721793bbb0c6cb7e0627dffe9800432d810566f5"} {"level":"debug","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5f88fb8a089d2ca0826b51b721793bbb0c6cb7e0627dffe9800432d810566f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:05:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:05:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e5f88fb8a089d2ca0826b51b721793bbb0c6cb7e0627dffe9800432d810566f5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/313474d0eb5021f593ac7e45cbf442b136a9526bdfe8f8a1108d330b10e073f6"} {"level":"info","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5f88fb8a089d2ca0826b51b721793bbb0c6cb7e0627dffe9800432d810566f5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb67a66578f17f792d4aaefeddd1a5d156ff6dea6b75aed6fdeb89b656406911","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:05:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:05:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb67a66578f17f792d4aaefeddd1a5d156ff6dea6b75aed6fdeb89b656406911","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5f88fb8a089d2ca0826b51b721793bbb0c6cb7e0627dffe9800432d810566f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:05:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:05:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5f88fb8a089d2ca0826b51b721793bbb0c6cb7e0627dffe9800432d810566f5"} {"level":"info","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5f88fb8a089d2ca0826b51b721793bbb0c6cb7e0627dffe9800432d810566f5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb67a66578f17f792d4aaefeddd1a5d156ff6dea6b75aed6fdeb89b656406911","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:05:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:05:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb67a66578f17f792d4aaefeddd1a5d156ff6dea6b75aed6fdeb89b656406911"} {"level":"info","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb67a66578f17f792d4aaefeddd1a5d156ff6dea6b75aed6fdeb89b656406911","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5f88fb8a089d2ca0826b51b721793bbb0c6cb7e0627dffe9800432d810566f5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb67a66578f17f792d4aaefeddd1a5d156ff6dea6b75aed6fdeb89b656406911","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:05:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:05:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cb67a66578f17f792d4aaefeddd1a5d156ff6dea6b75aed6fdeb89b656406911"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb67a66578f17f792d4aaefeddd1a5d156ff6dea6b75aed6fdeb89b656406911","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5f88fb8a089d2ca0826b51b721793bbb0c6cb7e0627dffe9800432d810566f5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb67a66578f17f792d4aaefeddd1a5d156ff6dea6b75aed6fdeb89b656406911","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:05:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:05:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cb67a66578f17f792d4aaefeddd1a5d156ff6dea6b75aed6fdeb89b656406911"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"cb67a66578f17f792d4aaefeddd1a5d156ff6dea6b75aed6fdeb89b656406911","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"cb67a66578f17f792d4aaefeddd1a5d156ff6dea6b75aed6fdeb89b656406911\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb67a66578f17f792d4aaefeddd1a5d156ff6dea6b75aed6fdeb89b656406911","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5f88fb8a089d2ca0826b51b721793bbb0c6cb7e0627dffe9800432d810566f5"} {"level":"debug","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb67a66578f17f792d4aaefeddd1a5d156ff6dea6b75aed6fdeb89b656406911","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:05:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:05:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb67a66578f17f792d4aaefeddd1a5d156ff6dea6b75aed6fdeb89b656406911","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5f88fb8a089d2ca0826b51b721793bbb0c6cb7e0627dffe9800432d810566f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:05:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:05:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e5f88fb8a089d2ca0826b51b721793bbb0c6cb7e0627dffe9800432d810566f5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb67a66578f17f792d4aaefeddd1a5d156ff6dea6b75aed6fdeb89b656406911"} {"level":"info","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5f88fb8a089d2ca0826b51b721793bbb0c6cb7e0627dffe9800432d810566f5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb67a66578f17f792d4aaefeddd1a5d156ff6dea6b75aed6fdeb89b656406911","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5f88fb8a089d2ca0826b51b721793bbb0c6cb7e0627dffe9800432d810566f5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2cdec0f62a873c8fb0455fab23023667f4d0342098e20cbe9f2e3943bc735e06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:05:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:05:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb67a66578f17f792d4aaefeddd1a5d156ff6dea6b75aed6fdeb89b656406911"} {"level":"info","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2cdec0f62a873c8fb0455fab23023667f4d0342098e20cbe9f2e3943bc735e06","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb67a66578f17f792d4aaefeddd1a5d156ff6dea6b75aed6fdeb89b656406911","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:05:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:05:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cb67a66578f17f792d4aaefeddd1a5d156ff6dea6b75aed6fdeb89b656406911"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb67a66578f17f792d4aaefeddd1a5d156ff6dea6b75aed6fdeb89b656406911","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2cdec0f62a873c8fb0455fab23023667f4d0342098e20cbe9f2e3943bc735e06","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb67a66578f17f792d4aaefeddd1a5d156ff6dea6b75aed6fdeb89b656406911","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5f88fb8a089d2ca0826b51b721793bbb0c6cb7e0627dffe9800432d810566f5"} {"level":"debug","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2cdec0f62a873c8fb0455fab23023667f4d0342098e20cbe9f2e3943bc735e06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:05:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:05:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2cdec0f62a873c8fb0455fab23023667f4d0342098e20cbe9f2e3943bc735e06","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2cdec0f62a873c8fb0455fab23023667f4d0342098e20cbe9f2e3943bc735e06","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2cdec0f62a873c8fb0455fab23023667f4d0342098e20cbe9f2e3943bc735e06"} {"level":"debug","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2cdec0f62a873c8fb0455fab23023667f4d0342098e20cbe9f2e3943bc735e06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:05:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:05:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2cdec0f62a873c8fb0455fab23023667f4d0342098e20cbe9f2e3943bc735e06"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb67a66578f17f792d4aaefeddd1a5d156ff6dea6b75aed6fdeb89b656406911"} {"level":"info","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2cdec0f62a873c8fb0455fab23023667f4d0342098e20cbe9f2e3943bc735e06","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2cdec0f62a873c8fb0455fab23023667f4d0342098e20cbe9f2e3943bc735e06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:05:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:05:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2cdec0f62a873c8fb0455fab23023667f4d0342098e20cbe9f2e3943bc735e06"} {"level":"info","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2cdec0f62a873c8fb0455fab23023667f4d0342098e20cbe9f2e3943bc735e06","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2cdec0f62a873c8fb0455fab23023667f4d0342098e20cbe9f2e3943bc735e06","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2cdec0f62a873c8fb0455fab23023667f4d0342098e20cbe9f2e3943bc735e06","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2cdec0f62a873c8fb0455fab23023667f4d0342098e20cbe9f2e3943bc735e06"} {"level":"debug","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2cdec0f62a873c8fb0455fab23023667f4d0342098e20cbe9f2e3943bc735e06","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2cdec0f62a873c8fb0455fab23023667f4d0342098e20cbe9f2e3943bc735e06"} {"level":"debug","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2cdec0f62a873c8fb0455fab23023667f4d0342098e20cbe9f2e3943bc735e06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:05:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:05:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2cdec0f62a873c8fb0455fab23023667f4d0342098e20cbe9f2e3943bc735e06"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2cdec0f62a873c8fb0455fab23023667f4d0342098e20cbe9f2e3943bc735e06","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2cdec0f62a873c8fb0455fab23023667f4d0342098e20cbe9f2e3943bc735e06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:05:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:05:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2cdec0f62a873c8fb0455fab23023667f4d0342098e20cbe9f2e3943bc735e06","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2cdec0f62a873c8fb0455fab23023667f4d0342098e20cbe9f2e3943bc735e06","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2cdec0f62a873c8fb0455fab23023667f4d0342098e20cbe9f2e3943bc735e06","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2cdec0f62a873c8fb0455fab23023667f4d0342098e20cbe9f2e3943bc735e06"} {"level":"debug","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4d686f62cc9b4e9f0068dbcaa9a6f9e61762ed338dbc16907395be741e436ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:05:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:05:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4d686f62cc9b4e9f0068dbcaa9a6f9e61762ed338dbc16907395be741e436ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2cdec0f62a873c8fb0455fab23023667f4d0342098e20cbe9f2e3943bc735e06","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f1e8ac3bd2a78db2538dbd3506a29af6545c422a7e33842be5fa00da4c6264d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:05:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:05:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2cdec0f62a873c8fb0455fab23023667f4d0342098e20cbe9f2e3943bc735e06"} {"level":"info","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f1e8ac3bd2a78db2538dbd3506a29af6545c422a7e33842be5fa00da4c6264d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4d686f62cc9b4e9f0068dbcaa9a6f9e61762ed338dbc16907395be741e436ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:05:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:05:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4d686f62cc9b4e9f0068dbcaa9a6f9e61762ed338dbc16907395be741e436ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f1e8ac3bd2a78db2538dbd3506a29af6545c422a7e33842be5fa00da4c6264d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4d686f62cc9b4e9f0068dbcaa9a6f9e61762ed338dbc16907395be741e436ac","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4d686f62cc9b4e9f0068dbcaa9a6f9e61762ed338dbc16907395be741e436ac"} {"level":"debug","ts":"2026-07-14T16:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4d686f62cc9b4e9f0068dbcaa9a6f9e61762ed338dbc16907395be741e436ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:05:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:05:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e4d686f62cc9b4e9f0068dbcaa9a6f9e61762ed338dbc16907395be741e436ac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f1e8ac3bd2a78db2538dbd3506a29af6545c422a7e33842be5fa00da4c6264d"} {"level":"info","ts":"2026-07-14T16:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4d686f62cc9b4e9f0068dbcaa9a6f9e61762ed338dbc16907395be741e436ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f1e8ac3bd2a78db2538dbd3506a29af6545c422a7e33842be5fa00da4c6264d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:05:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:05:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f1e8ac3bd2a78db2538dbd3506a29af6545c422a7e33842be5fa00da4c6264d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f1e8ac3bd2a78db2538dbd3506a29af6545c422a7e33842be5fa00da4c6264d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2cdec0f62a873c8fb0455fab23023667f4d0342098e20cbe9f2e3943bc735e06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:05:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:05:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2cdec0f62a873c8fb0455fab23023667f4d0342098e20cbe9f2e3943bc735e06"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4d686f62cc9b4e9f0068dbcaa9a6f9e61762ed338dbc16907395be741e436ac"} {"level":"info","ts":"2026-07-14T16:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2cdec0f62a873c8fb0455fab23023667f4d0342098e20cbe9f2e3943bc735e06","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4d686f62cc9b4e9f0068dbcaa9a6f9e61762ed338dbc16907395be741e436ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f1e8ac3bd2a78db2538dbd3506a29af6545c422a7e33842be5fa00da4c6264d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:05:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:05:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f1e8ac3bd2a78db2538dbd3506a29af6545c422a7e33842be5fa00da4c6264d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2cdec0f62a873c8fb0455fab23023667f4d0342098e20cbe9f2e3943bc735e06","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f1e8ac3bd2a78db2538dbd3506a29af6545c422a7e33842be5fa00da4c6264d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f1e8ac3bd2a78db2538dbd3506a29af6545c422a7e33842be5fa00da4c6264d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f1e8ac3bd2a78db2538dbd3506a29af6545c422a7e33842be5fa00da4c6264d"} {"level":"debug","ts":"2026-07-14T16:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f1e8ac3bd2a78db2538dbd3506a29af6545c422a7e33842be5fa00da4c6264d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:05:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:05:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f1e8ac3bd2a78db2538dbd3506a29af6545c422a7e33842be5fa00da4c6264d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4d686f62cc9b4e9f0068dbcaa9a6f9e61762ed338dbc16907395be741e436ac"} {"level":"info","ts":"2026-07-14T16:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f1e8ac3bd2a78db2538dbd3506a29af6545c422a7e33842be5fa00da4c6264d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f1e8ac3bd2a78db2538dbd3506a29af6545c422a7e33842be5fa00da4c6264d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2cdec0f62a873c8fb0455fab23023667f4d0342098e20cbe9f2e3943bc735e06"} {"level":"info","ts":"2026-07-14T16:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f1e8ac3bd2a78db2538dbd3506a29af6545c422a7e33842be5fa00da4c6264d"} {"level":"debug","ts":"2026-07-14T16:05:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf9a07d813d45b302fb18cd86295570e41c8c9b1fbb0adeedd18aca6bb4fd08f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:05:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:05:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:05:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf9a07d813d45b302fb18cd86295570e41c8c9b1fbb0adeedd18aca6bb4fd08f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf9a07d813d45b302fb18cd86295570e41c8c9b1fbb0adeedd18aca6bb4fd08f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf9a07d813d45b302fb18cd86295570e41c8c9b1fbb0adeedd18aca6bb4fd08f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:05:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf9a07d813d45b302fb18cd86295570e41c8c9b1fbb0adeedd18aca6bb4fd08f"} {"level":"debug","ts":"2026-07-14T16:05:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf9a07d813d45b302fb18cd86295570e41c8c9b1fbb0adeedd18aca6bb4fd08f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:05:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf9a07d813d45b302fb18cd86295570e41c8c9b1fbb0adeedd18aca6bb4fd08f"} {"level":"debug","ts":"2026-07-14T16:05:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf9a07d813d45b302fb18cd86295570e41c8c9b1fbb0adeedd18aca6bb4fd08f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:05:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:05:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cf9a07d813d45b302fb18cd86295570e41c8c9b1fbb0adeedd18aca6bb4fd08f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:05:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf9a07d813d45b302fb18cd86295570e41c8c9b1fbb0adeedd18aca6bb4fd08f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf9a07d813d45b302fb18cd86295570e41c8c9b1fbb0adeedd18aca6bb4fd08f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:05:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf9a07d813d45b302fb18cd86295570e41c8c9b1fbb0adeedd18aca6bb4fd08f"} {"level":"debug","ts":"2026-07-14T16:05:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5f88fb8a089d2ca0826b51b721793bbb0c6cb7e0627dffe9800432d810566f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:05:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:05:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:05:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5f88fb8a089d2ca0826b51b721793bbb0c6cb7e0627dffe9800432d810566f5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5f88fb8a089d2ca0826b51b721793bbb0c6cb7e0627dffe9800432d810566f5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5f88fb8a089d2ca0826b51b721793bbb0c6cb7e0627dffe9800432d810566f5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:05:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5f88fb8a089d2ca0826b51b721793bbb0c6cb7e0627dffe9800432d810566f5"} {"level":"info","ts":"2026-07-14T16:05:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5f88fb8a089d2ca0826b51b721793bbb0c6cb7e0627dffe9800432d810566f5"} {"level":"debug","ts":"2026-07-14T16:05:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5f88fb8a089d2ca0826b51b721793bbb0c6cb7e0627dffe9800432d810566f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:05:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:05:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e5f88fb8a089d2ca0826b51b721793bbb0c6cb7e0627dffe9800432d810566f5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:05:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5f88fb8a089d2ca0826b51b721793bbb0c6cb7e0627dffe9800432d810566f5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5f88fb8a089d2ca0826b51b721793bbb0c6cb7e0627dffe9800432d810566f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:05:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:05:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:05:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5f88fb8a089d2ca0826b51b721793bbb0c6cb7e0627dffe9800432d810566f5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5f88fb8a089d2ca0826b51b721793bbb0c6cb7e0627dffe9800432d810566f5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5f88fb8a089d2ca0826b51b721793bbb0c6cb7e0627dffe9800432d810566f5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:05:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5f88fb8a089d2ca0826b51b721793bbb0c6cb7e0627dffe9800432d810566f5"} {"level":"debug","ts":"2026-07-14T16:05:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5f88fb8a089d2ca0826b51b721793bbb0c6cb7e0627dffe9800432d810566f5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:05:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5f88fb8a089d2ca0826b51b721793bbb0c6cb7e0627dffe9800432d810566f5"} {"level":"debug","ts":"2026-07-14T16:05:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"313474d0eb5021f593ac7e45cbf442b136a9526bdfe8f8a1108d330b10e073f6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:05:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/313474d0eb5021f593ac7e45cbf442b136a9526bdfe8f8a1108d330b10e073f6"} {"level":"debug","ts":"2026-07-14T16:05:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5f88fb8a089d2ca0826b51b721793bbb0c6cb7e0627dffe9800432d810566f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:05:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:05:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e5f88fb8a089d2ca0826b51b721793bbb0c6cb7e0627dffe9800432d810566f5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:05:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5f88fb8a089d2ca0826b51b721793bbb0c6cb7e0627dffe9800432d810566f5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5f88fb8a089d2ca0826b51b721793bbb0c6cb7e0627dffe9800432d810566f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:05:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:05:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:05:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5f88fb8a089d2ca0826b51b721793bbb0c6cb7e0627dffe9800432d810566f5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5f88fb8a089d2ca0826b51b721793bbb0c6cb7e0627dffe9800432d810566f5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5f88fb8a089d2ca0826b51b721793bbb0c6cb7e0627dffe9800432d810566f5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:05:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5f88fb8a089d2ca0826b51b721793bbb0c6cb7e0627dffe9800432d810566f5"} {"level":"debug","ts":"2026-07-14T16:05:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5f88fb8a089d2ca0826b51b721793bbb0c6cb7e0627dffe9800432d810566f5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:05:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5f88fb8a089d2ca0826b51b721793bbb0c6cb7e0627dffe9800432d810566f5"} {"level":"debug","ts":"2026-07-14T16:05:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81fe7ed6d4b87742a973dbe96bf9f9146dd55fe744e083f173a9a945c2d98157","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:05:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81fe7ed6d4b87742a973dbe96bf9f9146dd55fe744e083f173a9a945c2d98157"} {"level":"debug","ts":"2026-07-14T16:05:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5f88fb8a089d2ca0826b51b721793bbb0c6cb7e0627dffe9800432d810566f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:05:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:05:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e5f88fb8a089d2ca0826b51b721793bbb0c6cb7e0627dffe9800432d810566f5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:05:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5f88fb8a089d2ca0826b51b721793bbb0c6cb7e0627dffe9800432d810566f5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5f88fb8a089d2ca0826b51b721793bbb0c6cb7e0627dffe9800432d810566f5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:05:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5f88fb8a089d2ca0826b51b721793bbb0c6cb7e0627dffe9800432d810566f5"} {"level":"debug","ts":"2026-07-14T16:05:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2cdec0f62a873c8fb0455fab23023667f4d0342098e20cbe9f2e3943bc735e06","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b61db41c17c4454ff0da2df1ca171d5aac4d011900ab21f640634a9879ddbfc0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:05:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2cdec0f62a873c8fb0455fab23023667f4d0342098e20cbe9f2e3943bc735e06"} {"level":"info","ts":"2026-07-14T16:05:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b61db41c17c4454ff0da2df1ca171d5aac4d011900ab21f640634a9879ddbfc0"} {"level":"debug","ts":"2026-07-14T16:05:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"098e45ab7c8e81a56b17edc2511a9c0ec1f53e111f7ce44ec31d20962946041b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:05:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/098e45ab7c8e81a56b17edc2511a9c0ec1f53e111f7ce44ec31d20962946041b"} {"level":"debug","ts":"2026-07-14T16:05:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"adb742abf62e24188ca13a4a0042ad0643b3f82c2828972e60f568a47d164d1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:05:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:05:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:05:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"adb742abf62e24188ca13a4a0042ad0643b3f82c2828972e60f568a47d164d1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"adb742abf62e24188ca13a4a0042ad0643b3f82c2828972e60f568a47d164d1a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:05:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/adb742abf62e24188ca13a4a0042ad0643b3f82c2828972e60f568a47d164d1a"} {"level":"debug","ts":"2026-07-14T16:05:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"adb742abf62e24188ca13a4a0042ad0643b3f82c2828972e60f568a47d164d1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"adb742abf62e24188ca13a4a0042ad0643b3f82c2828972e60f568a47d164d1a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:05:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/adb742abf62e24188ca13a4a0042ad0643b3f82c2828972e60f568a47d164d1a"} {"level":"debug","ts":"2026-07-14T16:05:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"adb742abf62e24188ca13a4a0042ad0643b3f82c2828972e60f568a47d164d1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:05:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:05:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["adb742abf62e24188ca13a4a0042ad0643b3f82c2828972e60f568a47d164d1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:05:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"adb742abf62e24188ca13a4a0042ad0643b3f82c2828972e60f568a47d164d1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"adb742abf62e24188ca13a4a0042ad0643b3f82c2828972e60f568a47d164d1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4d686f62cc9b4e9f0068dbcaa9a6f9e61762ed338dbc16907395be741e436ac","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:05:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/adb742abf62e24188ca13a4a0042ad0643b3f82c2828972e60f568a47d164d1a"} {"level":"debug","ts":"2026-07-14T16:05:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c2bb13c2dd3e1c51a69db9c88375f062d67de98a5ead5f01c5d00c0dab0c3c7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:05:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4d686f62cc9b4e9f0068dbcaa9a6f9e61762ed338dbc16907395be741e436ac"} {"level":"info","ts":"2026-07-14T16:05:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c2bb13c2dd3e1c51a69db9c88375f062d67de98a5ead5f01c5d00c0dab0c3c7"} {"level":"debug","ts":"2026-07-14T16:05:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6c67852148f3fcef75b97609a07066824f31bdfbcd51e77443505bffffaa853","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:05:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:05:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:05:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6c67852148f3fcef75b97609a07066824f31bdfbcd51e77443505bffffaa853"} {"level":"info","ts":"2026-07-14T16:05:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6c67852148f3fcef75b97609a07066824f31bdfbcd51e77443505bffffaa853","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f1e8ac3bd2a78db2538dbd3506a29af6545c422a7e33842be5fa00da4c6264d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6c67852148f3fcef75b97609a07066824f31bdfbcd51e77443505bffffaa853","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:05:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:05:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b6c67852148f3fcef75b97609a07066824f31bdfbcd51e77443505bffffaa853"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:05:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f1e8ac3bd2a78db2538dbd3506a29af6545c422a7e33842be5fa00da4c6264d"} {"level":"info","ts":"2026-07-14T16:05:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6c67852148f3fcef75b97609a07066824f31bdfbcd51e77443505bffffaa853","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6c67852148f3fcef75b97609a07066824f31bdfbcd51e77443505bffffaa853","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6c67852148f3fcef75b97609a07066824f31bdfbcd51e77443505bffffaa853","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:05:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:05:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:05:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6c67852148f3fcef75b97609a07066824f31bdfbcd51e77443505bffffaa853"} {"level":"info","ts":"2026-07-14T16:05:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6c67852148f3fcef75b97609a07066824f31bdfbcd51e77443505bffffaa853","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc57175700ab457fddd972f579c87c640cdf2a48ca10c986490fc4e1ac1e4c7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:05:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:05:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc57175700ab457fddd972f579c87c640cdf2a48ca10c986490fc4e1ac1e4c7f"} {"level":"info","ts":"2026-07-14T16:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc57175700ab457fddd972f579c87c640cdf2a48ca10c986490fc4e1ac1e4c7f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6c67852148f3fcef75b97609a07066824f31bdfbcd51e77443505bffffaa853","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed2d4dd5e02d2c7ac430be91b5fb2c98203725f80eeecfc6f84759433294adac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc57175700ab457fddd972f579c87c640cdf2a48ca10c986490fc4e1ac1e4c7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:05:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:05:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dc57175700ab457fddd972f579c87c640cdf2a48ca10c986490fc4e1ac1e4c7f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6c67852148f3fcef75b97609a07066824f31bdfbcd51e77443505bffffaa853"} {"level":"info","ts":"2026-07-14T16:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc57175700ab457fddd972f579c87c640cdf2a48ca10c986490fc4e1ac1e4c7f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6c67852148f3fcef75b97609a07066824f31bdfbcd51e77443505bffffaa853","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:05:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:05:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b6c67852148f3fcef75b97609a07066824f31bdfbcd51e77443505bffffaa853"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed2d4dd5e02d2c7ac430be91b5fb2c98203725f80eeecfc6f84759433294adac"} {"level":"info","ts":"2026-07-14T16:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6c67852148f3fcef75b97609a07066824f31bdfbcd51e77443505bffffaa853","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc57175700ab457fddd972f579c87c640cdf2a48ca10c986490fc4e1ac1e4c7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:05:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:05:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc57175700ab457fddd972f579c87c640cdf2a48ca10c986490fc4e1ac1e4c7f"} {"level":"info","ts":"2026-07-14T16:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc57175700ab457fddd972f579c87c640cdf2a48ca10c986490fc4e1ac1e4c7f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78cf544cc3af549b4d067d80bf3c4b030553ca9b28afeef15b07706627b15925","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:05:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:05:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78cf544cc3af549b4d067d80bf3c4b030553ca9b28afeef15b07706627b15925","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6c67852148f3fcef75b97609a07066824f31bdfbcd51e77443505bffffaa853","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8cd55675ad00887e8bd34ed206eedd93f6ffbb8d903103fa7ad9002e2d456b5c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc57175700ab457fddd972f579c87c640cdf2a48ca10c986490fc4e1ac1e4c7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:05:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:05:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dc57175700ab457fddd972f579c87c640cdf2a48ca10c986490fc4e1ac1e4c7f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78cf544cc3af549b4d067d80bf3c4b030553ca9b28afeef15b07706627b15925"} {"level":"info","ts":"2026-07-14T16:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc57175700ab457fddd972f579c87c640cdf2a48ca10c986490fc4e1ac1e4c7f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d50d0518d60eb8c99f8d462cda08d0ac60146ffb082ae34b6c4d61fb813cef7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78cf544cc3af549b4d067d80bf3c4b030553ca9b28afeef15b07706627b15925","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:05:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:05:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["78cf544cc3af549b4d067d80bf3c4b030553ca9b28afeef15b07706627b15925"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6c67852148f3fcef75b97609a07066824f31bdfbcd51e77443505bffffaa853"} {"level":"info","ts":"2026-07-14T16:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78cf544cc3af549b4d067d80bf3c4b030553ca9b28afeef15b07706627b15925","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc57175700ab457fddd972f579c87c640cdf2a48ca10c986490fc4e1ac1e4c7f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2aa4e66b6d33a84150dab0415946341e0eaeacfe92a239e5126084018f864bc7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78cf544cc3af549b4d067d80bf3c4b030553ca9b28afeef15b07706627b15925","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8cd55675ad00887e8bd34ed206eedd93f6ffbb8d903103fa7ad9002e2d456b5c"} {"level":"info","ts":"2026-07-14T16:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc57175700ab457fddd972f579c87c640cdf2a48ca10c986490fc4e1ac1e4c7f"} {"level":"debug","ts":"2026-07-14T16:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4a5a13d791e74d1fbd26c2b91798157ecaa2ebe9cb36c836e3b1b3ce2ec78fe","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d50d0518d60eb8c99f8d462cda08d0ac60146ffb082ae34b6c4d61fb813cef7"} {"level":"debug","ts":"2026-07-14T16:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e4a399330e8bfbfe0294ff93ffe5c8b43cf62c6f4e3837ba3986c5f5248cfa7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78cf544cc3af549b4d067d80bf3c4b030553ca9b28afeef15b07706627b15925"} {"level":"debug","ts":"2026-07-14T16:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1cb3f5c2cd104fc41b94f1d210a08a6fa6f77c059b984284017bd5e7ddc72e64","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2aa4e66b6d33a84150dab0415946341e0eaeacfe92a239e5126084018f864bc7"} {"level":"debug","ts":"2026-07-14T16:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"45388ac6293eda7f276dee5c282dd1976021374bd88cf0a07789b42e3dee7e1f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb67a66578f17f792d4aaefeddd1a5d156ff6dea6b75aed6fdeb89b656406911","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4a5a13d791e74d1fbd26c2b91798157ecaa2ebe9cb36c836e3b1b3ce2ec78fe"} {"level":"info","ts":"2026-07-14T16:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e4a399330e8bfbfe0294ff93ffe5c8b43cf62c6f4e3837ba3986c5f5248cfa7"} {"level":"debug","ts":"2026-07-14T16:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02e87055c21d19238449f069afd6a7fc72ca793b39e82edc9337db2aac7216be","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1cb3f5c2cd104fc41b94f1d210a08a6fa6f77c059b984284017bd5e7ddc72e64"} {"level":"info","ts":"2026-07-14T16:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45388ac6293eda7f276dee5c282dd1976021374bd88cf0a07789b42e3dee7e1f"} {"level":"info","ts":"2026-07-14T16:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb67a66578f17f792d4aaefeddd1a5d156ff6dea6b75aed6fdeb89b656406911"} {"level":"info","ts":"2026-07-14T16:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02e87055c21d19238449f069afd6a7fc72ca793b39e82edc9337db2aac7216be"} {"level":"info","ts":"2026-07-14T16:05:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1a6ac091-59d9-4344-b3c1-caff7aa9d936","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:48194","PortSpecifier":{"PortValue":48194}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1a6ac091-59d9-4344-b3c1-caff7aa9d936","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-bea800.apps.bef11670-107b-4509-941d-05c0a92404fb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T16:05:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1a6ac091-59d9-4344-b3c1-caff7aa9d936","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:48194","PortSpecifier":{"PortValue":48194}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784045143,"nanos":322958988},"http":{"id":"1a6ac091-59d9-4344-b3c1-caff7aa9d936","method":"POST","headers":{":authority":"e2e-shared-a-bea800.apps.bef11670-107b-4509-941d-05c0a92404fb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T16:05:43Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1a6ac091-59d9-4344-b3c1-caff7aa9d936","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T16:05:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1a6ac091-59d9-4344-b3c1-caff7aa9d936","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"26fbefcd-1f3f-4523-899a-2d5408ecb467","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3165f2a7-c048-415b-a85c-a215d11d2af8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/05c0a92404fb"]}} {"level":"debug","ts":"2026-07-14T16:05:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1a6ac091-59d9-4344-b3c1-caff7aa9d936","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/05c0a92404fb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3165f2a7-c048-415b-a85c-a215d11d2af8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"26fbefcd-1f3f-4523-899a-2d5408ecb467","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"dc57175700ab457fddd972f579c87c640cdf2a48ca10c986490fc4e1ac1e4c7f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.76:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-bea800.apps.bef11670-107b-4509-941d-05c0a92404fb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T16:05:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1a6ac091-59d9-4344-b3c1-caff7aa9d936","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T16:05:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1a6ac091-59d9-4344-b3c1-caff7aa9d936","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T16:05:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1a6ac091-59d9-4344-b3c1-caff7aa9d936","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bea800/sub-test-model-bea800\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-bea800/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T16:05:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1a6ac091-59d9-4344-b3c1-caff7aa9d936","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T16:05:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1a6ac091-59d9-4344-b3c1-caff7aa9d936","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T16:05:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1a6ac091-59d9-4344-b3c1-caff7aa9d936","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T16:05:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1a6ac091-59d9-4344-b3c1-caff7aa9d936","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T16:05:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1a6ac091-59d9-4344-b3c1-caff7aa9d936","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T16:05:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6fb8d4d1-6bdb-4edb-86e9-6b0fef7fea91","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:49700","PortSpecifier":{"PortValue":49700}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.78:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6fb8d4d1-6bdb-4edb-86e9-6b0fef7fea91","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-519447.apps.bef11670-107b-4509-941d-05c0a92404fb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T16:05:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6fb8d4d1-6bdb-4edb-86e9-6b0fef7fea91","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:49700","PortSpecifier":{"PortValue":49700}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.78:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784045143,"nanos":358943395},"http":{"id":"6fb8d4d1-6bdb-4edb-86e9-6b0fef7fea91","method":"POST","headers":{":authority":"e2e-shared-b-519447.apps.bef11670-107b-4509-941d-05c0a92404fb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T16:05:43Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6fb8d4d1-6bdb-4edb-86e9-6b0fef7fea91","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T16:05:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6fb8d4d1-6bdb-4edb-86e9-6b0fef7fea91","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"26fbefcd-1f3f-4523-899a-2d5408ecb467","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3165f2a7-c048-415b-a85c-a215d11d2af8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/05c0a92404fb"]}} {"level":"debug","ts":"2026-07-14T16:05:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6fb8d4d1-6bdb-4edb-86e9-6b0fef7fea91","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/05c0a92404fb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3165f2a7-c048-415b-a85c-a215d11d2af8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"26fbefcd-1f3f-4523-899a-2d5408ecb467","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"adb742abf62e24188ca13a4a0042ad0643b3f82c2828972e60f568a47d164d1a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.78:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-519447.apps.bef11670-107b-4509-941d-05c0a92404fb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T16:05:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6fb8d4d1-6bdb-4edb-86e9-6b0fef7fea91","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T16:05:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6fb8d4d1-6bdb-4edb-86e9-6b0fef7fea91","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T16:05:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6fb8d4d1-6bdb-4edb-86e9-6b0fef7fea91","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-519447/sub-test-model-519447\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-519447/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T16:05:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6fb8d4d1-6bdb-4edb-86e9-6b0fef7fea91","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T16:05:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6fb8d4d1-6bdb-4edb-86e9-6b0fef7fea91","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T16:05:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6fb8d4d1-6bdb-4edb-86e9-6b0fef7fea91","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T16:05:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6fb8d4d1-6bdb-4edb-86e9-6b0fef7fea91","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T16:05:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6fb8d4d1-6bdb-4edb-86e9-6b0fef7fea91","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T16:05:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"babae258-0a67-4148-88c5-1f3cbf2896b9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:48200","PortSpecifier":{"PortValue":48200}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"babae258-0a67-4148-88c5-1f3cbf2896b9","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-bea800.apps.bef11670-107b-4509-941d-05c0a92404fb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T16:05:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"babae258-0a67-4148-88c5-1f3cbf2896b9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:48200","PortSpecifier":{"PortValue":48200}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784045143,"nanos":390557676},"http":{"id":"babae258-0a67-4148-88c5-1f3cbf2896b9","method":"GET","headers":{":authority":"e2e-shared-a-bea800.apps.bef11670-107b-4509-941d-05c0a92404fb.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T16:05:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"babae258-0a67-4148-88c5-1f3cbf2896b9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-BYEKnaunvV7QfkQe_LpVztUXCj8QgmrZpv4MCvgdkKp4pxcOf29OmyNiVtKD"} {"level":"debug","ts":"2026-07-14T16:05:43Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"babae258-0a67-4148-88c5-1f3cbf2896b9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-bea800.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-BYEKnaunvV7QfkQe_LpVztUXCj8QgmrZpv4MCvgdkKp4pxcOf29OmyNiVtKD\"}"} {"level":"debug","ts":"2026-07-14T16:05:43Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"babae258-0a67-4148-88c5-1f3cbf2896b9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bea800.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"de3e7f10-4158-4dba-920a-c3da0c6f8896","keyName":"e2e-sub-iso-bff96d","subscription":"e2e-a-only-b48c15","tenant":"e2e-shared-a-bea800","userId":"de3e7f10-4158-4dba-920a-c3da0c6f8896","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T16:05:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"babae258-0a67-4148-88c5-1f3cbf2896b9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T16:05:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"babae258-0a67-4148-88c5-1f3cbf2896b9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T16:05:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"babae258-0a67-4148-88c5-1f3cbf2896b9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T16:05:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"babae258-0a67-4148-88c5-1f3cbf2896b9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bea800/sub-test-model-bea800\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-bea800/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T16:05:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"babae258-0a67-4148-88c5-1f3cbf2896b9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-14T16:05:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"babae258-0a67-4148-88c5-1f3cbf2896b9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T16:05:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"babae258-0a67-4148-88c5-1f3cbf2896b9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-b48c15"} {"level":"debug","ts":"2026-07-14T16:05:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"babae258-0a67-4148-88c5-1f3cbf2896b9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T16:05:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"babae258-0a67-4148-88c5-1f3cbf2896b9","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T16:05:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"babae258-0a67-4148-88c5-1f3cbf2896b9","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T16:05:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"58dc92f7-4bbc-4b5d-94cb-002d8efa7db1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:49708","PortSpecifier":{"PortValue":49708}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.78:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"58dc92f7-4bbc-4b5d-94cb-002d8efa7db1","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-519447.apps.bef11670-107b-4509-941d-05c0a92404fb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T16:05:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"58dc92f7-4bbc-4b5d-94cb-002d8efa7db1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:49708","PortSpecifier":{"PortValue":49708}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.78:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784045143,"nanos":422664854},"http":{"id":"58dc92f7-4bbc-4b5d-94cb-002d8efa7db1","method":"GET","headers":{":authority":"e2e-shared-b-519447.apps.bef11670-107b-4509-941d-05c0a92404fb.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T16:05:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"58dc92f7-4bbc-4b5d-94cb-002d8efa7db1","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-70D9MHeQwp8uvvy8_Z6t5QE5YofBNBfJaK8WgNitNfw3sUZ3AnGtNdo8c0Ev"} {"level":"debug","ts":"2026-07-14T16:05:43Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"58dc92f7-4bbc-4b5d-94cb-002d8efa7db1","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-519447.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-70D9MHeQwp8uvvy8_Z6t5QE5YofBNBfJaK8WgNitNfw3sUZ3AnGtNdo8c0Ev\"}"} {"level":"debug","ts":"2026-07-14T16:05:43Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"58dc92f7-4bbc-4b5d-94cb-002d8efa7db1","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-519447.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"932033cf-464a-4270-aa3a-f38f90e69af5","keyName":"e2e-sub-iso-11b2de","subscription":"e2e-b-only-b48c15","tenant":"e2e-shared-b-519447","userId":"932033cf-464a-4270-aa3a-f38f90e69af5","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T16:05:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"58dc92f7-4bbc-4b5d-94cb-002d8efa7db1","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T16:05:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"58dc92f7-4bbc-4b5d-94cb-002d8efa7db1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T16:05:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"58dc92f7-4bbc-4b5d-94cb-002d8efa7db1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T16:05:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"58dc92f7-4bbc-4b5d-94cb-002d8efa7db1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-519447/sub-test-model-519447\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-519447/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T16:05:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"58dc92f7-4bbc-4b5d-94cb-002d8efa7db1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-14T16:05:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"58dc92f7-4bbc-4b5d-94cb-002d8efa7db1","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T16:05:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"58dc92f7-4bbc-4b5d-94cb-002d8efa7db1","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-b48c15"} {"level":"debug","ts":"2026-07-14T16:05:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"58dc92f7-4bbc-4b5d-94cb-002d8efa7db1","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T16:05:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"58dc92f7-4bbc-4b5d-94cb-002d8efa7db1","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T16:05:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"58dc92f7-4bbc-4b5d-94cb-002d8efa7db1","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T16:05:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0ac63608-85c4-4490-a45a-4458d948b8d1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:40720","PortSpecifier":{"PortValue":40720}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0ac63608-85c4-4490-a45a-4458d948b8d1","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-bea800.apps.bef11670-107b-4509-941d-05c0a92404fb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T16:05:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0ac63608-85c4-4490-a45a-4458d948b8d1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:40720","PortSpecifier":{"PortValue":40720}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784045155,"nanos":774553144},"http":{"id":"0ac63608-85c4-4490-a45a-4458d948b8d1","method":"POST","headers":{":authority":"e2e-shared-a-bea800.apps.bef11670-107b-4509-941d-05c0a92404fb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T16:05:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0ac63608-85c4-4490-a45a-4458d948b8d1","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T16:05:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0ac63608-85c4-4490-a45a-4458d948b8d1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"26fbefcd-1f3f-4523-899a-2d5408ecb467","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3165f2a7-c048-415b-a85c-a215d11d2af8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/05c0a92404fb"]}} {"level":"debug","ts":"2026-07-14T16:05:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0ac63608-85c4-4490-a45a-4458d948b8d1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/05c0a92404fb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3165f2a7-c048-415b-a85c-a215d11d2af8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"26fbefcd-1f3f-4523-899a-2d5408ecb467","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"dc57175700ab457fddd972f579c87c640cdf2a48ca10c986490fc4e1ac1e4c7f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.76:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-bea800.apps.bef11670-107b-4509-941d-05c0a92404fb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T16:05:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0ac63608-85c4-4490-a45a-4458d948b8d1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T16:05:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0ac63608-85c4-4490-a45a-4458d948b8d1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T16:05:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0ac63608-85c4-4490-a45a-4458d948b8d1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bea800/sub-test-model-bea800\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-bea800/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T16:05:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0ac63608-85c4-4490-a45a-4458d948b8d1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T16:05:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0ac63608-85c4-4490-a45a-4458d948b8d1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T16:05:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0ac63608-85c4-4490-a45a-4458d948b8d1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T16:05:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0ac63608-85c4-4490-a45a-4458d948b8d1","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T16:05:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0ac63608-85c4-4490-a45a-4458d948b8d1","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T16:05:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d937fe1c-deb1-47fa-b75e-b0ff7a8cd44d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:57734","PortSpecifier":{"PortValue":57734}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.78:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d937fe1c-deb1-47fa-b75e-b0ff7a8cd44d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-519447.apps.bef11670-107b-4509-941d-05c0a92404fb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T16:05:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d937fe1c-deb1-47fa-b75e-b0ff7a8cd44d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:57734","PortSpecifier":{"PortValue":57734}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.78:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784045155,"nanos":810602624},"http":{"id":"d937fe1c-deb1-47fa-b75e-b0ff7a8cd44d","method":"POST","headers":{":authority":"e2e-shared-b-519447.apps.bef11670-107b-4509-941d-05c0a92404fb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T16:05:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d937fe1c-deb1-47fa-b75e-b0ff7a8cd44d","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T16:05:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d937fe1c-deb1-47fa-b75e-b0ff7a8cd44d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"26fbefcd-1f3f-4523-899a-2d5408ecb467","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3165f2a7-c048-415b-a85c-a215d11d2af8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/05c0a92404fb"]}} {"level":"debug","ts":"2026-07-14T16:05:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d937fe1c-deb1-47fa-b75e-b0ff7a8cd44d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/05c0a92404fb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3165f2a7-c048-415b-a85c-a215d11d2af8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"26fbefcd-1f3f-4523-899a-2d5408ecb467","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"adb742abf62e24188ca13a4a0042ad0643b3f82c2828972e60f568a47d164d1a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.78:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-519447.apps.bef11670-107b-4509-941d-05c0a92404fb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T16:05:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d937fe1c-deb1-47fa-b75e-b0ff7a8cd44d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T16:05:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d937fe1c-deb1-47fa-b75e-b0ff7a8cd44d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T16:05:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d937fe1c-deb1-47fa-b75e-b0ff7a8cd44d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-519447/sub-test-model-519447\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-519447/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T16:05:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d937fe1c-deb1-47fa-b75e-b0ff7a8cd44d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T16:05:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d937fe1c-deb1-47fa-b75e-b0ff7a8cd44d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T16:05:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d937fe1c-deb1-47fa-b75e-b0ff7a8cd44d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T16:05:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d937fe1c-deb1-47fa-b75e-b0ff7a8cd44d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T16:05:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d937fe1c-deb1-47fa-b75e-b0ff7a8cd44d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T16:05:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1297ddea-035e-4388-9e07-a81d02d40aef","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:40730","PortSpecifier":{"PortValue":40730}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1297ddea-035e-4388-9e07-a81d02d40aef","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-bea800.apps.bef11670-107b-4509-941d-05c0a92404fb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T16:05:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1297ddea-035e-4388-9e07-a81d02d40aef","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:40730","PortSpecifier":{"PortValue":40730}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784045155,"nanos":845463134},"http":{"id":"1297ddea-035e-4388-9e07-a81d02d40aef","method":"POST","headers":{":authority":"e2e-shared-a-bea800.apps.bef11670-107b-4509-941d-05c0a92404fb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T16:05:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1297ddea-035e-4388-9e07-a81d02d40aef","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Qu8p0j8Llofz2Uzy_kXmpHbXsHz79Cuq9LMGkJegwvN1yOb7n6sPjrQqvb80"} {"level":"debug","ts":"2026-07-14T16:05:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1297ddea-035e-4388-9e07-a81d02d40aef","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-bea800.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Qu8p0j8Llofz2Uzy_kXmpHbXsHz79Cuq9LMGkJegwvN1yOb7n6sPjrQqvb80\"}"} {"level":"debug","ts":"2026-07-14T16:05:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1297ddea-035e-4388-9e07-a81d02d40aef","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bea800.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"20cbc62f-ba34-4c02-a5f6-c9f43365ef93","keyName":"e2e-sub-iso-b731b6","subscription":"e2e-shared-sub-d2bef9","tenant":"e2e-shared-a-bea800","userId":"20cbc62f-ba34-4c02-a5f6-c9f43365ef93","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T16:05:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1297ddea-035e-4388-9e07-a81d02d40aef","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T16:05:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1297ddea-035e-4388-9e07-a81d02d40aef","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T16:05:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1297ddea-035e-4388-9e07-a81d02d40aef","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T16:05:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1297ddea-035e-4388-9e07-a81d02d40aef","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bea800/sub-test-model-bea800\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-bea800/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T16:05:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1297ddea-035e-4388-9e07-a81d02d40aef","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-14T16:05:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1297ddea-035e-4388-9e07-a81d02d40aef","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T16:05:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1297ddea-035e-4388-9e07-a81d02d40aef","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T16:05:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1297ddea-035e-4388-9e07-a81d02d40aef","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-d2bef9"} {"level":"info","ts":"2026-07-14T16:05:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1297ddea-035e-4388-9e07-a81d02d40aef","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T16:05:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1297ddea-035e-4388-9e07-a81d02d40aef","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T16:05:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e90f2315-503c-4d66-91ad-da122b09df56","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:57740","PortSpecifier":{"PortValue":57740}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.78:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e90f2315-503c-4d66-91ad-da122b09df56","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-519447.apps.bef11670-107b-4509-941d-05c0a92404fb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T16:05:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e90f2315-503c-4d66-91ad-da122b09df56","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:57740","PortSpecifier":{"PortValue":57740}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.78:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784045155,"nanos":874373043},"http":{"id":"e90f2315-503c-4d66-91ad-da122b09df56","method":"POST","headers":{":authority":"e2e-shared-b-519447.apps.bef11670-107b-4509-941d-05c0a92404fb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T16:05:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e90f2315-503c-4d66-91ad-da122b09df56","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-plO0msQMcSf5wymg_vuX2ant8v1UFmgjRe8oQjsAzMGFErdJqFvJenKSNbiM"} {"level":"debug","ts":"2026-07-14T16:05:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e90f2315-503c-4d66-91ad-da122b09df56","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-519447.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-plO0msQMcSf5wymg_vuX2ant8v1UFmgjRe8oQjsAzMGFErdJqFvJenKSNbiM\"}"} {"level":"debug","ts":"2026-07-14T16:05:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e90f2315-503c-4d66-91ad-da122b09df56","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-519447.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6c271c26-059a-431a-ad0b-c63ee8eeb53a","keyName":"e2e-sub-iso-050625","subscription":"e2e-shared-sub-d2bef9","tenant":"e2e-shared-b-519447","userId":"6c271c26-059a-431a-ad0b-c63ee8eeb53a","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T16:05:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e90f2315-503c-4d66-91ad-da122b09df56","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T16:05:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e90f2315-503c-4d66-91ad-da122b09df56","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T16:05:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e90f2315-503c-4d66-91ad-da122b09df56","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T16:05:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e90f2315-503c-4d66-91ad-da122b09df56","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-519447/sub-test-model-519447\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-519447/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T16:05:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e90f2315-503c-4d66-91ad-da122b09df56","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-14T16:05:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e90f2315-503c-4d66-91ad-da122b09df56","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-d2bef9"} {"level":"debug","ts":"2026-07-14T16:05:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e90f2315-503c-4d66-91ad-da122b09df56","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T16:05:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e90f2315-503c-4d66-91ad-da122b09df56","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T16:05:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e90f2315-503c-4d66-91ad-da122b09df56","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T16:05:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e90f2315-503c-4d66-91ad-da122b09df56","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T16:06:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1d50d0518d60eb8c99f8d462cda08d0ac60146ffb082ae34b6c4d61fb813cef7"} {"level":"info","ts":"2026-07-14T16:06:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/45388ac6293eda7f276dee5c282dd1976021374bd88cf0a07789b42e3dee7e1f"} {"level":"info","ts":"2026-07-14T16:06:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b61db41c17c4454ff0da2df1ca171d5aac4d011900ab21f640634a9879ddbfc0"} {"level":"info","ts":"2026-07-14T16:06:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6e4a399330e8bfbfe0294ff93ffe5c8b43cf62c6f4e3837ba3986c5f5248cfa7"} {"level":"info","ts":"2026-07-14T16:06:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/098e45ab7c8e81a56b17edc2511a9c0ec1f53e111f7ce44ec31d20962946041b"} {"level":"info","ts":"2026-07-14T16:06:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8cd55675ad00887e8bd34ed206eedd93f6ffbb8d903103fa7ad9002e2d456b5c"} {"level":"info","ts":"2026-07-14T16:06:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cf9a07d813d45b302fb18cd86295570e41c8c9b1fbb0adeedd18aca6bb4fd08f"} {"level":"info","ts":"2026-07-14T16:06:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/02e87055c21d19238449f069afd6a7fc72ca793b39e82edc9337db2aac7216be"} {"level":"info","ts":"2026-07-14T16:06:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e4d686f62cc9b4e9f0068dbcaa9a6f9e61762ed338dbc16907395be741e436ac"} {"level":"info","ts":"2026-07-14T16:06:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2cdec0f62a873c8fb0455fab23023667f4d0342098e20cbe9f2e3943bc735e06"} {"level":"info","ts":"2026-07-14T16:06:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/81fe7ed6d4b87742a973dbe96bf9f9146dd55fe744e083f173a9a945c2d98157"} {"level":"info","ts":"2026-07-14T16:06:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/313474d0eb5021f593ac7e45cbf442b136a9526bdfe8f8a1108d330b10e073f6"} {"level":"info","ts":"2026-07-14T16:06:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cb67a66578f17f792d4aaefeddd1a5d156ff6dea6b75aed6fdeb89b656406911"} {"level":"info","ts":"2026-07-14T16:06:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2aa4e66b6d33a84150dab0415946341e0eaeacfe92a239e5126084018f864bc7"} {"level":"info","ts":"2026-07-14T16:06:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e5f88fb8a089d2ca0826b51b721793bbb0c6cb7e0627dffe9800432d810566f5"} {"level":"info","ts":"2026-07-14T16:06:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5f1e8ac3bd2a78db2538dbd3506a29af6545c422a7e33842be5fa00da4c6264d"} {"level":"debug","ts":"2026-07-14T16:06:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"faa879c4b4e334223c1dd469f04e9192a422ec1a70b1c53800e23afb6eb06e58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:06:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:06:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:06:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"faa879c4b4e334223c1dd469f04e9192a422ec1a70b1c53800e23afb6eb06e58","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:06:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"faa879c4b4e334223c1dd469f04e9192a422ec1a70b1c53800e23afb6eb06e58","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:06:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"faa879c4b4e334223c1dd469f04e9192a422ec1a70b1c53800e23afb6eb06e58","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:06:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/faa879c4b4e334223c1dd469f04e9192a422ec1a70b1c53800e23afb6eb06e58"} {"level":"debug","ts":"2026-07-14T16:06:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"faa879c4b4e334223c1dd469f04e9192a422ec1a70b1c53800e23afb6eb06e58","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:06:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/faa879c4b4e334223c1dd469f04e9192a422ec1a70b1c53800e23afb6eb06e58"} {"level":"debug","ts":"2026-07-14T16:06:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"faa879c4b4e334223c1dd469f04e9192a422ec1a70b1c53800e23afb6eb06e58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:06:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:06:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["faa879c4b4e334223c1dd469f04e9192a422ec1a70b1c53800e23afb6eb06e58"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:06:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"faa879c4b4e334223c1dd469f04e9192a422ec1a70b1c53800e23afb6eb06e58","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:06:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"faa879c4b4e334223c1dd469f04e9192a422ec1a70b1c53800e23afb6eb06e58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:06:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:06:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:06:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"faa879c4b4e334223c1dd469f04e9192a422ec1a70b1c53800e23afb6eb06e58","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:06:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"faa879c4b4e334223c1dd469f04e9192a422ec1a70b1c53800e23afb6eb06e58","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:06:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"faa879c4b4e334223c1dd469f04e9192a422ec1a70b1c53800e23afb6eb06e58","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:06:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a60eb64576bebc52a3e19344029d35bf5d546e32d1fa5673546e8be3dccbd3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:06:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:06:25Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:06:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/faa879c4b4e334223c1dd469f04e9192a422ec1a70b1c53800e23afb6eb06e58"} {"level":"info","ts":"2026-07-14T16:06:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a60eb64576bebc52a3e19344029d35bf5d546e32d1fa5673546e8be3dccbd3c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:06:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a60eb64576bebc52a3e19344029d35bf5d546e32d1fa5673546e8be3dccbd3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:06:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:06:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:06:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a60eb64576bebc52a3e19344029d35bf5d546e32d1fa5673546e8be3dccbd3c"} {"level":"info","ts":"2026-07-14T16:06:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a60eb64576bebc52a3e19344029d35bf5d546e32d1fa5673546e8be3dccbd3c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:06:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"faa879c4b4e334223c1dd469f04e9192a422ec1a70b1c53800e23afb6eb06e58","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:06:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a60eb64576bebc52a3e19344029d35bf5d546e32d1fa5673546e8be3dccbd3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:06:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:06:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5a60eb64576bebc52a3e19344029d35bf5d546e32d1fa5673546e8be3dccbd3c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-14T16:06:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5a60eb64576bebc52a3e19344029d35bf5d546e32d1fa5673546e8be3dccbd3c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5a60eb64576bebc52a3e19344029d35bf5d546e32d1fa5673546e8be3dccbd3c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T16:06:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a60eb64576bebc52a3e19344029d35bf5d546e32d1fa5673546e8be3dccbd3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:06:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:06:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5a60eb64576bebc52a3e19344029d35bf5d546e32d1fa5673546e8be3dccbd3c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:06:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/faa879c4b4e334223c1dd469f04e9192a422ec1a70b1c53800e23afb6eb06e58"} {"level":"info","ts":"2026-07-14T16:06:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a60eb64576bebc52a3e19344029d35bf5d546e32d1fa5673546e8be3dccbd3c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:06:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a60eb64576bebc52a3e19344029d35bf5d546e32d1fa5673546e8be3dccbd3c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:06:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a60eb64576bebc52a3e19344029d35bf5d546e32d1fa5673546e8be3dccbd3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:06:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:06:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:06:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a60eb64576bebc52a3e19344029d35bf5d546e32d1fa5673546e8be3dccbd3c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:06:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a60eb64576bebc52a3e19344029d35bf5d546e32d1fa5673546e8be3dccbd3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:06:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:06:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:06:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a60eb64576bebc52a3e19344029d35bf5d546e32d1fa5673546e8be3dccbd3c"} {"level":"error","ts":"2026-07-14T16:06:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5a60eb64576bebc52a3e19344029d35bf5d546e32d1fa5673546e8be3dccbd3c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5a60eb64576bebc52a3e19344029d35bf5d546e32d1fa5673546e8be3dccbd3c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T16:06:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"faa879c4b4e334223c1dd469f04e9192a422ec1a70b1c53800e23afb6eb06e58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:06:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:06:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["faa879c4b4e334223c1dd469f04e9192a422ec1a70b1c53800e23afb6eb06e58"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:06:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"faa879c4b4e334223c1dd469f04e9192a422ec1a70b1c53800e23afb6eb06e58","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:06:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a60eb64576bebc52a3e19344029d35bf5d546e32d1fa5673546e8be3dccbd3c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:06:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a60eb64576bebc52a3e19344029d35bf5d546e32d1fa5673546e8be3dccbd3c"} {"level":"debug","ts":"2026-07-14T16:06:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"faa879c4b4e334223c1dd469f04e9192a422ec1a70b1c53800e23afb6eb06e58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:06:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:06:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:06:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"faa879c4b4e334223c1dd469f04e9192a422ec1a70b1c53800e23afb6eb06e58","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:06:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"faa879c4b4e334223c1dd469f04e9192a422ec1a70b1c53800e23afb6eb06e58","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:06:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"faa879c4b4e334223c1dd469f04e9192a422ec1a70b1c53800e23afb6eb06e58","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:06:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/faa879c4b4e334223c1dd469f04e9192a422ec1a70b1c53800e23afb6eb06e58"} {"level":"debug","ts":"2026-07-14T16:06:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"faa879c4b4e334223c1dd469f04e9192a422ec1a70b1c53800e23afb6eb06e58","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:06:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a60eb64576bebc52a3e19344029d35bf5d546e32d1fa5673546e8be3dccbd3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:06:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:06:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5a60eb64576bebc52a3e19344029d35bf5d546e32d1fa5673546e8be3dccbd3c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:06:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/faa879c4b4e334223c1dd469f04e9192a422ec1a70b1c53800e23afb6eb06e58"} {"level":"info","ts":"2026-07-14T16:06:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a60eb64576bebc52a3e19344029d35bf5d546e32d1fa5673546e8be3dccbd3c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:06:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a60eb64576bebc52a3e19344029d35bf5d546e32d1fa5673546e8be3dccbd3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:06:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:06:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:06:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a60eb64576bebc52a3e19344029d35bf5d546e32d1fa5673546e8be3dccbd3c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:06:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a60eb64576bebc52a3e19344029d35bf5d546e32d1fa5673546e8be3dccbd3c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:06:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a60eb64576bebc52a3e19344029d35bf5d546e32d1fa5673546e8be3dccbd3c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:06:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a60eb64576bebc52a3e19344029d35bf5d546e32d1fa5673546e8be3dccbd3c"} {"level":"debug","ts":"2026-07-14T16:06:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"faa879c4b4e334223c1dd469f04e9192a422ec1a70b1c53800e23afb6eb06e58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:06:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:06:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["faa879c4b4e334223c1dd469f04e9192a422ec1a70b1c53800e23afb6eb06e58"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:06:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"faa879c4b4e334223c1dd469f04e9192a422ec1a70b1c53800e23afb6eb06e58","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:06:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a60eb64576bebc52a3e19344029d35bf5d546e32d1fa5673546e8be3dccbd3c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:06:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"faa879c4b4e334223c1dd469f04e9192a422ec1a70b1c53800e23afb6eb06e58","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:06:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a60eb64576bebc52a3e19344029d35bf5d546e32d1fa5673546e8be3dccbd3c"} {"level":"info","ts":"2026-07-14T16:06:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/faa879c4b4e334223c1dd469f04e9192a422ec1a70b1c53800e23afb6eb06e58"} {"level":"debug","ts":"2026-07-14T16:06:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a60eb64576bebc52a3e19344029d35bf5d546e32d1fa5673546e8be3dccbd3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:06:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:06:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5a60eb64576bebc52a3e19344029d35bf5d546e32d1fa5673546e8be3dccbd3c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:06:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a60eb64576bebc52a3e19344029d35bf5d546e32d1fa5673546e8be3dccbd3c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:06:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a60eb64576bebc52a3e19344029d35bf5d546e32d1fa5673546e8be3dccbd3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:06:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:06:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:06:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a60eb64576bebc52a3e19344029d35bf5d546e32d1fa5673546e8be3dccbd3c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:06:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a60eb64576bebc52a3e19344029d35bf5d546e32d1fa5673546e8be3dccbd3c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:06:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a60eb64576bebc52a3e19344029d35bf5d546e32d1fa5673546e8be3dccbd3c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:06:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a60eb64576bebc52a3e19344029d35bf5d546e32d1fa5673546e8be3dccbd3c"} {"level":"debug","ts":"2026-07-14T16:06:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a60eb64576bebc52a3e19344029d35bf5d546e32d1fa5673546e8be3dccbd3c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:06:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a60eb64576bebc52a3e19344029d35bf5d546e32d1fa5673546e8be3dccbd3c"} {"level":"debug","ts":"2026-07-14T16:06:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a60eb64576bebc52a3e19344029d35bf5d546e32d1fa5673546e8be3dccbd3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:06:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:06:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5a60eb64576bebc52a3e19344029d35bf5d546e32d1fa5673546e8be3dccbd3c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:06:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a60eb64576bebc52a3e19344029d35bf5d546e32d1fa5673546e8be3dccbd3c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:06:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a60eb64576bebc52a3e19344029d35bf5d546e32d1fa5673546e8be3dccbd3c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:06:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a60eb64576bebc52a3e19344029d35bf5d546e32d1fa5673546e8be3dccbd3c"} {"level":"debug","ts":"2026-07-14T16:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08c716f376269ee13189abce2fa2a60d1f1f8d629c7fede921191d5b8bc6e4b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:06:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:06:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08c716f376269ee13189abce2fa2a60d1f1f8d629c7fede921191d5b8bc6e4b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08c716f376269ee13189abce2fa2a60d1f1f8d629c7fede921191d5b8bc6e4b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08c716f376269ee13189abce2fa2a60d1f1f8d629c7fede921191d5b8bc6e4b7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08c716f376269ee13189abce2fa2a60d1f1f8d629c7fede921191d5b8bc6e4b7"} {"level":"debug","ts":"2026-07-14T16:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08c716f376269ee13189abce2fa2a60d1f1f8d629c7fede921191d5b8bc6e4b7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08c716f376269ee13189abce2fa2a60d1f1f8d629c7fede921191d5b8bc6e4b7"} {"level":"debug","ts":"2026-07-14T16:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08c716f376269ee13189abce2fa2a60d1f1f8d629c7fede921191d5b8bc6e4b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:06:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:06:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["08c716f376269ee13189abce2fa2a60d1f1f8d629c7fede921191d5b8bc6e4b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08c716f376269ee13189abce2fa2a60d1f1f8d629c7fede921191d5b8bc6e4b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08c716f376269ee13189abce2fa2a60d1f1f8d629c7fede921191d5b8bc6e4b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:06:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:06:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08c716f376269ee13189abce2fa2a60d1f1f8d629c7fede921191d5b8bc6e4b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08c716f376269ee13189abce2fa2a60d1f1f8d629c7fede921191d5b8bc6e4b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08c716f376269ee13189abce2fa2a60d1f1f8d629c7fede921191d5b8bc6e4b7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08c716f376269ee13189abce2fa2a60d1f1f8d629c7fede921191d5b8bc6e4b7"} {"level":"debug","ts":"2026-07-14T16:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08c716f376269ee13189abce2fa2a60d1f1f8d629c7fede921191d5b8bc6e4b7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08c716f376269ee13189abce2fa2a60d1f1f8d629c7fede921191d5b8bc6e4b7"} {"level":"debug","ts":"2026-07-14T16:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08c716f376269ee13189abce2fa2a60d1f1f8d629c7fede921191d5b8bc6e4b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:06:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:06:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["08c716f376269ee13189abce2fa2a60d1f1f8d629c7fede921191d5b8bc6e4b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08c716f376269ee13189abce2fa2a60d1f1f8d629c7fede921191d5b8bc6e4b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08c716f376269ee13189abce2fa2a60d1f1f8d629c7fede921191d5b8bc6e4b7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08c716f376269ee13189abce2fa2a60d1f1f8d629c7fede921191d5b8bc6e4b7"} {"level":"debug","ts":"2026-07-14T16:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c84349e322ffbfbc8de20fd8b935d1f6a5c90b439b02ba0006c93308931f62f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:06:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:06:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c84349e322ffbfbc8de20fd8b935d1f6a5c90b439b02ba0006c93308931f62f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c84349e322ffbfbc8de20fd8b935d1f6a5c90b439b02ba0006c93308931f62f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c84349e322ffbfbc8de20fd8b935d1f6a5c90b439b02ba0006c93308931f62f0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c84349e322ffbfbc8de20fd8b935d1f6a5c90b439b02ba0006c93308931f62f0"} {"level":"debug","ts":"2026-07-14T16:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c84349e322ffbfbc8de20fd8b935d1f6a5c90b439b02ba0006c93308931f62f0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c84349e322ffbfbc8de20fd8b935d1f6a5c90b439b02ba0006c93308931f62f0"} {"level":"debug","ts":"2026-07-14T16:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c84349e322ffbfbc8de20fd8b935d1f6a5c90b439b02ba0006c93308931f62f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:06:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:06:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c84349e322ffbfbc8de20fd8b935d1f6a5c90b439b02ba0006c93308931f62f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c84349e322ffbfbc8de20fd8b935d1f6a5c90b439b02ba0006c93308931f62f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c84349e322ffbfbc8de20fd8b935d1f6a5c90b439b02ba0006c93308931f62f0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c84349e322ffbfbc8de20fd8b935d1f6a5c90b439b02ba0006c93308931f62f0"} {"level":"debug","ts":"2026-07-14T16:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4ca517fa4d820b89f8881d0634f720636d7bb68f4b68cc629679f91fd863d1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:06:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:06:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4ca517fa4d820b89f8881d0634f720636d7bb68f4b68cc629679f91fd863d1f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4ca517fa4d820b89f8881d0634f720636d7bb68f4b68cc629679f91fd863d1f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4ca517fa4d820b89f8881d0634f720636d7bb68f4b68cc629679f91fd863d1f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4ca517fa4d820b89f8881d0634f720636d7bb68f4b68cc629679f91fd863d1f"} {"level":"debug","ts":"2026-07-14T16:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4ca517fa4d820b89f8881d0634f720636d7bb68f4b68cc629679f91fd863d1f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4ca517fa4d820b89f8881d0634f720636d7bb68f4b68cc629679f91fd863d1f"} {"level":"debug","ts":"2026-07-14T16:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4ca517fa4d820b89f8881d0634f720636d7bb68f4b68cc629679f91fd863d1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:06:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:06:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d4ca517fa4d820b89f8881d0634f720636d7bb68f4b68cc629679f91fd863d1f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4ca517fa4d820b89f8881d0634f720636d7bb68f4b68cc629679f91fd863d1f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4ca517fa4d820b89f8881d0634f720636d7bb68f4b68cc629679f91fd863d1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:06:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:06:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4ca517fa4d820b89f8881d0634f720636d7bb68f4b68cc629679f91fd863d1f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f48db350da2042b132c764b885f99e314c51bb77addcc64947387e95d230dee9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:06:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:06:26Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4ca517fa4d820b89f8881d0634f720636d7bb68f4b68cc629679f91fd863d1f"} {"level":"info","ts":"2026-07-14T16:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f48db350da2042b132c764b885f99e314c51bb77addcc64947387e95d230dee9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4ca517fa4d820b89f8881d0634f720636d7bb68f4b68cc629679f91fd863d1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:06:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:06:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d4ca517fa4d820b89f8881d0634f720636d7bb68f4b68cc629679f91fd863d1f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4ca517fa4d820b89f8881d0634f720636d7bb68f4b68cc629679f91fd863d1f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f48db350da2042b132c764b885f99e314c51bb77addcc64947387e95d230dee9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:06:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:06:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f48db350da2042b132c764b885f99e314c51bb77addcc64947387e95d230dee9"} {"level":"info","ts":"2026-07-14T16:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f48db350da2042b132c764b885f99e314c51bb77addcc64947387e95d230dee9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4ca517fa4d820b89f8881d0634f720636d7bb68f4b68cc629679f91fd863d1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:06:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:06:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4ca517fa4d820b89f8881d0634f720636d7bb68f4b68cc629679f91fd863d1f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f48db350da2042b132c764b885f99e314c51bb77addcc64947387e95d230dee9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:06:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:06:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f48db350da2042b132c764b885f99e314c51bb77addcc64947387e95d230dee9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4ca517fa4d820b89f8881d0634f720636d7bb68f4b68cc629679f91fd863d1f"} {"level":"info","ts":"2026-07-14T16:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f48db350da2042b132c764b885f99e314c51bb77addcc64947387e95d230dee9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4ca517fa4d820b89f8881d0634f720636d7bb68f4b68cc629679f91fd863d1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:06:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:06:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d4ca517fa4d820b89f8881d0634f720636d7bb68f4b68cc629679f91fd863d1f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4ca517fa4d820b89f8881d0634f720636d7bb68f4b68cc629679f91fd863d1f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f48db350da2042b132c764b885f99e314c51bb77addcc64947387e95d230dee9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:06:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:06:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f48db350da2042b132c764b885f99e314c51bb77addcc64947387e95d230dee9"} {"level":"info","ts":"2026-07-14T16:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f48db350da2042b132c764b885f99e314c51bb77addcc64947387e95d230dee9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4ca517fa4d820b89f8881d0634f720636d7bb68f4b68cc629679f91fd863d1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:06:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:06:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4ca517fa4d820b89f8881d0634f720636d7bb68f4b68cc629679f91fd863d1f"} {"level":"info","ts":"2026-07-14T16:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4ca517fa4d820b89f8881d0634f720636d7bb68f4b68cc629679f91fd863d1f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f48db350da2042b132c764b885f99e314c51bb77addcc64947387e95d230dee9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b657f31bbbe946923747ef8b02fc76431319161dd75972e9c165a566a0044818","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:06:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:06:26Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b657f31bbbe946923747ef8b02fc76431319161dd75972e9c165a566a0044818","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4ca517fa4d820b89f8881d0634f720636d7bb68f4b68cc629679f91fd863d1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:06:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:06:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d4ca517fa4d820b89f8881d0634f720636d7bb68f4b68cc629679f91fd863d1f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f48db350da2042b132c764b885f99e314c51bb77addcc64947387e95d230dee9"} {"level":"info","ts":"2026-07-14T16:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4ca517fa4d820b89f8881d0634f720636d7bb68f4b68cc629679f91fd863d1f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e443cf22db2f76e4552c0713ca704cb6c52233cd136bce913280ea464befbd85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:06:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:06:26Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e443cf22db2f76e4552c0713ca704cb6c52233cd136bce913280ea464befbd85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f48db350da2042b132c764b885f99e314c51bb77addcc64947387e95d230dee9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:06:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:06:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f48db350da2042b132c764b885f99e314c51bb77addcc64947387e95d230dee9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b657f31bbbe946923747ef8b02fc76431319161dd75972e9c165a566a0044818"} {"level":"info","ts":"2026-07-14T16:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f48db350da2042b132c764b885f99e314c51bb77addcc64947387e95d230dee9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b657f31bbbe946923747ef8b02fc76431319161dd75972e9c165a566a0044818","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:06:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:06:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b657f31bbbe946923747ef8b02fc76431319161dd75972e9c165a566a0044818"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4ca517fa4d820b89f8881d0634f720636d7bb68f4b68cc629679f91fd863d1f"} {"level":"info","ts":"2026-07-14T16:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b657f31bbbe946923747ef8b02fc76431319161dd75972e9c165a566a0044818","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4ca517fa4d820b89f8881d0634f720636d7bb68f4b68cc629679f91fd863d1f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e443cf22db2f76e4552c0713ca704cb6c52233cd136bce913280ea464befbd85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:06:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:06:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e443cf22db2f76e4552c0713ca704cb6c52233cd136bce913280ea464befbd85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f48db350da2042b132c764b885f99e314c51bb77addcc64947387e95d230dee9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b657f31bbbe946923747ef8b02fc76431319161dd75972e9c165a566a0044818","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e443cf22db2f76e4552c0713ca704cb6c52233cd136bce913280ea464befbd85","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e443cf22db2f76e4552c0713ca704cb6c52233cd136bce913280ea464befbd85"} {"level":"debug","ts":"2026-07-14T16:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e443cf22db2f76e4552c0713ca704cb6c52233cd136bce913280ea464befbd85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:06:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:06:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e443cf22db2f76e4552c0713ca704cb6c52233cd136bce913280ea464befbd85"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e443cf22db2f76e4552c0713ca704cb6c52233cd136bce913280ea464befbd85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e443cf22db2f76e4552c0713ca704cb6c52233cd136bce913280ea464befbd85","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f48db350da2042b132c764b885f99e314c51bb77addcc64947387e95d230dee9"} {"level":"info","ts":"2026-07-14T16:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b657f31bbbe946923747ef8b02fc76431319161dd75972e9c165a566a0044818"} {"level":"info","ts":"2026-07-14T16:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e443cf22db2f76e4552c0713ca704cb6c52233cd136bce913280ea464befbd85"} {"level":"debug","ts":"2026-07-14T16:06:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95f26a37dce6f0d8628fdec3adbd2d0c59e10b83f2268a2fef379518f5986ab1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:06:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:06:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:06:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95f26a37dce6f0d8628fdec3adbd2d0c59e10b83f2268a2fef379518f5986ab1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:06:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95f26a37dce6f0d8628fdec3adbd2d0c59e10b83f2268a2fef379518f5986ab1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:06:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95f26a37dce6f0d8628fdec3adbd2d0c59e10b83f2268a2fef379518f5986ab1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:06:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95f26a37dce6f0d8628fdec3adbd2d0c59e10b83f2268a2fef379518f5986ab1"} {"level":"debug","ts":"2026-07-14T16:06:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95f26a37dce6f0d8628fdec3adbd2d0c59e10b83f2268a2fef379518f5986ab1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:06:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95f26a37dce6f0d8628fdec3adbd2d0c59e10b83f2268a2fef379518f5986ab1"} {"level":"debug","ts":"2026-07-14T16:06:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95f26a37dce6f0d8628fdec3adbd2d0c59e10b83f2268a2fef379518f5986ab1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:06:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:06:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["95f26a37dce6f0d8628fdec3adbd2d0c59e10b83f2268a2fef379518f5986ab1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:06:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95f26a37dce6f0d8628fdec3adbd2d0c59e10b83f2268a2fef379518f5986ab1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:06:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95f26a37dce6f0d8628fdec3adbd2d0c59e10b83f2268a2fef379518f5986ab1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:06:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:06:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:06:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95f26a37dce6f0d8628fdec3adbd2d0c59e10b83f2268a2fef379518f5986ab1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:06:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95f26a37dce6f0d8628fdec3adbd2d0c59e10b83f2268a2fef379518f5986ab1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:06:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95f26a37dce6f0d8628fdec3adbd2d0c59e10b83f2268a2fef379518f5986ab1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:06:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95f26a37dce6f0d8628fdec3adbd2d0c59e10b83f2268a2fef379518f5986ab1"} {"level":"debug","ts":"2026-07-14T16:06:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95f26a37dce6f0d8628fdec3adbd2d0c59e10b83f2268a2fef379518f5986ab1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:06:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95f26a37dce6f0d8628fdec3adbd2d0c59e10b83f2268a2fef379518f5986ab1"} {"level":"debug","ts":"2026-07-14T16:06:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95f26a37dce6f0d8628fdec3adbd2d0c59e10b83f2268a2fef379518f5986ab1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:06:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:06:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["95f26a37dce6f0d8628fdec3adbd2d0c59e10b83f2268a2fef379518f5986ab1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:06:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95f26a37dce6f0d8628fdec3adbd2d0c59e10b83f2268a2fef379518f5986ab1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:06:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95f26a37dce6f0d8628fdec3adbd2d0c59e10b83f2268a2fef379518f5986ab1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:06:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:06:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:06:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95f26a37dce6f0d8628fdec3adbd2d0c59e10b83f2268a2fef379518f5986ab1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:06:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95f26a37dce6f0d8628fdec3adbd2d0c59e10b83f2268a2fef379518f5986ab1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:06:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95f26a37dce6f0d8628fdec3adbd2d0c59e10b83f2268a2fef379518f5986ab1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:06:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95f26a37dce6f0d8628fdec3adbd2d0c59e10b83f2268a2fef379518f5986ab1"} {"level":"debug","ts":"2026-07-14T16:06:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95f26a37dce6f0d8628fdec3adbd2d0c59e10b83f2268a2fef379518f5986ab1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:06:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95f26a37dce6f0d8628fdec3adbd2d0c59e10b83f2268a2fef379518f5986ab1"} {"level":"debug","ts":"2026-07-14T16:06:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95f26a37dce6f0d8628fdec3adbd2d0c59e10b83f2268a2fef379518f5986ab1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:06:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:06:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["95f26a37dce6f0d8628fdec3adbd2d0c59e10b83f2268a2fef379518f5986ab1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:06:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95f26a37dce6f0d8628fdec3adbd2d0c59e10b83f2268a2fef379518f5986ab1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:06:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95f26a37dce6f0d8628fdec3adbd2d0c59e10b83f2268a2fef379518f5986ab1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:06:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:06:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:06:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95f26a37dce6f0d8628fdec3adbd2d0c59e10b83f2268a2fef379518f5986ab1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:06:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95f26a37dce6f0d8628fdec3adbd2d0c59e10b83f2268a2fef379518f5986ab1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:06:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95f26a37dce6f0d8628fdec3adbd2d0c59e10b83f2268a2fef379518f5986ab1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:06:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95f26a37dce6f0d8628fdec3adbd2d0c59e10b83f2268a2fef379518f5986ab1"} {"level":"debug","ts":"2026-07-14T16:06:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95f26a37dce6f0d8628fdec3adbd2d0c59e10b83f2268a2fef379518f5986ab1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:06:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95f26a37dce6f0d8628fdec3adbd2d0c59e10b83f2268a2fef379518f5986ab1"} {"level":"debug","ts":"2026-07-14T16:06:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95f26a37dce6f0d8628fdec3adbd2d0c59e10b83f2268a2fef379518f5986ab1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:06:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:06:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["95f26a37dce6f0d8628fdec3adbd2d0c59e10b83f2268a2fef379518f5986ab1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:06:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95f26a37dce6f0d8628fdec3adbd2d0c59e10b83f2268a2fef379518f5986ab1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:06:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95f26a37dce6f0d8628fdec3adbd2d0c59e10b83f2268a2fef379518f5986ab1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:06:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:06:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:06:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95f26a37dce6f0d8628fdec3adbd2d0c59e10b83f2268a2fef379518f5986ab1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:06:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95f26a37dce6f0d8628fdec3adbd2d0c59e10b83f2268a2fef379518f5986ab1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:06:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95f26a37dce6f0d8628fdec3adbd2d0c59e10b83f2268a2fef379518f5986ab1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:06:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95f26a37dce6f0d8628fdec3adbd2d0c59e10b83f2268a2fef379518f5986ab1"} {"level":"debug","ts":"2026-07-14T16:06:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95f26a37dce6f0d8628fdec3adbd2d0c59e10b83f2268a2fef379518f5986ab1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:06:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95f26a37dce6f0d8628fdec3adbd2d0c59e10b83f2268a2fef379518f5986ab1"} {"level":"debug","ts":"2026-07-14T16:06:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95f26a37dce6f0d8628fdec3adbd2d0c59e10b83f2268a2fef379518f5986ab1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:06:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:06:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["95f26a37dce6f0d8628fdec3adbd2d0c59e10b83f2268a2fef379518f5986ab1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:06:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95f26a37dce6f0d8628fdec3adbd2d0c59e10b83f2268a2fef379518f5986ab1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:06:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95f26a37dce6f0d8628fdec3adbd2d0c59e10b83f2268a2fef379518f5986ab1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:06:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:06:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:06:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95f26a37dce6f0d8628fdec3adbd2d0c59e10b83f2268a2fef379518f5986ab1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:06:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95f26a37dce6f0d8628fdec3adbd2d0c59e10b83f2268a2fef379518f5986ab1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:06:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95f26a37dce6f0d8628fdec3adbd2d0c59e10b83f2268a2fef379518f5986ab1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:06:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95f26a37dce6f0d8628fdec3adbd2d0c59e10b83f2268a2fef379518f5986ab1"} {"level":"debug","ts":"2026-07-14T16:06:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95f26a37dce6f0d8628fdec3adbd2d0c59e10b83f2268a2fef379518f5986ab1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:06:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95f26a37dce6f0d8628fdec3adbd2d0c59e10b83f2268a2fef379518f5986ab1"} {"level":"debug","ts":"2026-07-14T16:06:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95f26a37dce6f0d8628fdec3adbd2d0c59e10b83f2268a2fef379518f5986ab1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:06:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:06:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["95f26a37dce6f0d8628fdec3adbd2d0c59e10b83f2268a2fef379518f5986ab1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95f26a37dce6f0d8628fdec3adbd2d0c59e10b83f2268a2fef379518f5986ab1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95f26a37dce6f0d8628fdec3adbd2d0c59e10b83f2268a2fef379518f5986ab1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95f26a37dce6f0d8628fdec3adbd2d0c59e10b83f2268a2fef379518f5986ab1"} {"level":"debug","ts":"2026-07-14T16:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eca739f7599a631ecaa0ecbaf54ddde56b7ff90cfc81d947110b067517ac0abd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:06:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:06:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eca739f7599a631ecaa0ecbaf54ddde56b7ff90cfc81d947110b067517ac0abd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eca739f7599a631ecaa0ecbaf54ddde56b7ff90cfc81d947110b067517ac0abd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eca739f7599a631ecaa0ecbaf54ddde56b7ff90cfc81d947110b067517ac0abd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eca739f7599a631ecaa0ecbaf54ddde56b7ff90cfc81d947110b067517ac0abd"} {"level":"debug","ts":"2026-07-14T16:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eca739f7599a631ecaa0ecbaf54ddde56b7ff90cfc81d947110b067517ac0abd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eca739f7599a631ecaa0ecbaf54ddde56b7ff90cfc81d947110b067517ac0abd"} {"level":"debug","ts":"2026-07-14T16:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eca739f7599a631ecaa0ecbaf54ddde56b7ff90cfc81d947110b067517ac0abd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:06:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:06:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eca739f7599a631ecaa0ecbaf54ddde56b7ff90cfc81d947110b067517ac0abd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eca739f7599a631ecaa0ecbaf54ddde56b7ff90cfc81d947110b067517ac0abd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d78045e31bb96dfddc6812b999afcd4b2098b84b728fb6750be4998291ca1ff1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:06:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:06:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d78045e31bb96dfddc6812b999afcd4b2098b84b728fb6750be4998291ca1ff1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d78045e31bb96dfddc6812b999afcd4b2098b84b728fb6750be4998291ca1ff1"} {"level":"debug","ts":"2026-07-14T16:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eca739f7599a631ecaa0ecbaf54ddde56b7ff90cfc81d947110b067517ac0abd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:06:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:06:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eca739f7599a631ecaa0ecbaf54ddde56b7ff90cfc81d947110b067517ac0abd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d78045e31bb96dfddc6812b999afcd4b2098b84b728fb6750be4998291ca1ff1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:06:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:06:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d78045e31bb96dfddc6812b999afcd4b2098b84b728fb6750be4998291ca1ff1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eca739f7599a631ecaa0ecbaf54ddde56b7ff90cfc81d947110b067517ac0abd"} {"level":"info","ts":"2026-07-14T16:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d78045e31bb96dfddc6812b999afcd4b2098b84b728fb6750be4998291ca1ff1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eca739f7599a631ecaa0ecbaf54ddde56b7ff90cfc81d947110b067517ac0abd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:06:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:06:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eca739f7599a631ecaa0ecbaf54ddde56b7ff90cfc81d947110b067517ac0abd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eca739f7599a631ecaa0ecbaf54ddde56b7ff90cfc81d947110b067517ac0abd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d78045e31bb96dfddc6812b999afcd4b2098b84b728fb6750be4998291ca1ff1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:06:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:06:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d78045e31bb96dfddc6812b999afcd4b2098b84b728fb6750be4998291ca1ff1"} {"level":"info","ts":"2026-07-14T16:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d78045e31bb96dfddc6812b999afcd4b2098b84b728fb6750be4998291ca1ff1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eca739f7599a631ecaa0ecbaf54ddde56b7ff90cfc81d947110b067517ac0abd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:06:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:06:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eca739f7599a631ecaa0ecbaf54ddde56b7ff90cfc81d947110b067517ac0abd"} {"level":"info","ts":"2026-07-14T16:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eca739f7599a631ecaa0ecbaf54ddde56b7ff90cfc81d947110b067517ac0abd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d78045e31bb96dfddc6812b999afcd4b2098b84b728fb6750be4998291ca1ff1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eca739f7599a631ecaa0ecbaf54ddde56b7ff90cfc81d947110b067517ac0abd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:06:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:06:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eca739f7599a631ecaa0ecbaf54ddde56b7ff90cfc81d947110b067517ac0abd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eca739f7599a631ecaa0ecbaf54ddde56b7ff90cfc81d947110b067517ac0abd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d78045e31bb96dfddc6812b999afcd4b2098b84b728fb6750be4998291ca1ff1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5b05ed6e07911d55921760ef3be7ea311041109200e71fc48f426a333425088","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:06:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:06:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d78045e31bb96dfddc6812b999afcd4b2098b84b728fb6750be4998291ca1ff1"} {"level":"info","ts":"2026-07-14T16:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5b05ed6e07911d55921760ef3be7ea311041109200e71fc48f426a333425088","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eca739f7599a631ecaa0ecbaf54ddde56b7ff90cfc81d947110b067517ac0abd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:06:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:06:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eca739f7599a631ecaa0ecbaf54ddde56b7ff90cfc81d947110b067517ac0abd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5b05ed6e07911d55921760ef3be7ea311041109200e71fc48f426a333425088","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d78045e31bb96dfddc6812b999afcd4b2098b84b728fb6750be4998291ca1ff1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:06:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:06:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d78045e31bb96dfddc6812b999afcd4b2098b84b728fb6750be4998291ca1ff1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eca739f7599a631ecaa0ecbaf54ddde56b7ff90cfc81d947110b067517ac0abd"} {"level":"info","ts":"2026-07-14T16:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d78045e31bb96dfddc6812b999afcd4b2098b84b728fb6750be4998291ca1ff1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eca739f7599a631ecaa0ecbaf54ddde56b7ff90cfc81d947110b067517ac0abd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:06:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:06:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eca739f7599a631ecaa0ecbaf54ddde56b7ff90cfc81d947110b067517ac0abd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eca739f7599a631ecaa0ecbaf54ddde56b7ff90cfc81d947110b067517ac0abd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5b05ed6e07911d55921760ef3be7ea311041109200e71fc48f426a333425088","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:06:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:06:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5b05ed6e07911d55921760ef3be7ea311041109200e71fc48f426a333425088"} {"level":"info","ts":"2026-07-14T16:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5b05ed6e07911d55921760ef3be7ea311041109200e71fc48f426a333425088","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d78045e31bb96dfddc6812b999afcd4b2098b84b728fb6750be4998291ca1ff1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eca739f7599a631ecaa0ecbaf54ddde56b7ff90cfc81d947110b067517ac0abd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:06:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:06:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eca739f7599a631ecaa0ecbaf54ddde56b7ff90cfc81d947110b067517ac0abd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5b05ed6e07911d55921760ef3be7ea311041109200e71fc48f426a333425088","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:06:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:06:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5b05ed6e07911d55921760ef3be7ea311041109200e71fc48f426a333425088"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eca739f7599a631ecaa0ecbaf54ddde56b7ff90cfc81d947110b067517ac0abd"} {"level":"info","ts":"2026-07-14T16:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5b05ed6e07911d55921760ef3be7ea311041109200e71fc48f426a333425088","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eca739f7599a631ecaa0ecbaf54ddde56b7ff90cfc81d947110b067517ac0abd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:06:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:06:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eca739f7599a631ecaa0ecbaf54ddde56b7ff90cfc81d947110b067517ac0abd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d78045e31bb96dfddc6812b999afcd4b2098b84b728fb6750be4998291ca1ff1"} {"level":"info","ts":"2026-07-14T16:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eca739f7599a631ecaa0ecbaf54ddde56b7ff90cfc81d947110b067517ac0abd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5b05ed6e07911d55921760ef3be7ea311041109200e71fc48f426a333425088","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:06:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:06:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5b05ed6e07911d55921760ef3be7ea311041109200e71fc48f426a333425088","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eca739f7599a631ecaa0ecbaf54ddde56b7ff90cfc81d947110b067517ac0abd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f893f393c9aa43af01bbad1a129132b94c117d59114724eda74ef31ae6ce22bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:06:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:06:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5b05ed6e07911d55921760ef3be7ea311041109200e71fc48f426a333425088"} {"level":"info","ts":"2026-07-14T16:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f893f393c9aa43af01bbad1a129132b94c117d59114724eda74ef31ae6ce22bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5b05ed6e07911d55921760ef3be7ea311041109200e71fc48f426a333425088","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:06:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:06:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5b05ed6e07911d55921760ef3be7ea311041109200e71fc48f426a333425088"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5b05ed6e07911d55921760ef3be7ea311041109200e71fc48f426a333425088","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f893f393c9aa43af01bbad1a129132b94c117d59114724eda74ef31ae6ce22bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5b05ed6e07911d55921760ef3be7ea311041109200e71fc48f426a333425088","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eca739f7599a631ecaa0ecbaf54ddde56b7ff90cfc81d947110b067517ac0abd"} {"level":"debug","ts":"2026-07-14T16:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f893f393c9aa43af01bbad1a129132b94c117d59114724eda74ef31ae6ce22bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:06:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:06:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f893f393c9aa43af01bbad1a129132b94c117d59114724eda74ef31ae6ce22bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f893f393c9aa43af01bbad1a129132b94c117d59114724eda74ef31ae6ce22bb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f893f393c9aa43af01bbad1a129132b94c117d59114724eda74ef31ae6ce22bb"} {"level":"debug","ts":"2026-07-14T16:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f893f393c9aa43af01bbad1a129132b94c117d59114724eda74ef31ae6ce22bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:06:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:06:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f893f393c9aa43af01bbad1a129132b94c117d59114724eda74ef31ae6ce22bb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5b05ed6e07911d55921760ef3be7ea311041109200e71fc48f426a333425088"} {"level":"info","ts":"2026-07-14T16:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f893f393c9aa43af01bbad1a129132b94c117d59114724eda74ef31ae6ce22bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f893f393c9aa43af01bbad1a129132b94c117d59114724eda74ef31ae6ce22bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:06:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:06:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f893f393c9aa43af01bbad1a129132b94c117d59114724eda74ef31ae6ce22bb"} {"level":"info","ts":"2026-07-14T16:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f893f393c9aa43af01bbad1a129132b94c117d59114724eda74ef31ae6ce22bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42f7b71fbc888ff7afea71121ea26f2ad80e45f3a0554f0090f6065a1ada1852","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:06:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:06:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f893f393c9aa43af01bbad1a129132b94c117d59114724eda74ef31ae6ce22bb"} {"level":"info","ts":"2026-07-14T16:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42f7b71fbc888ff7afea71121ea26f2ad80e45f3a0554f0090f6065a1ada1852","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f893f393c9aa43af01bbad1a129132b94c117d59114724eda74ef31ae6ce22bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:06:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:06:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f893f393c9aa43af01bbad1a129132b94c117d59114724eda74ef31ae6ce22bb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42f7b71fbc888ff7afea71121ea26f2ad80e45f3a0554f0090f6065a1ada1852"} {"level":"info","ts":"2026-07-14T16:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f893f393c9aa43af01bbad1a129132b94c117d59114724eda74ef31ae6ce22bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42f7b71fbc888ff7afea71121ea26f2ad80e45f3a0554f0090f6065a1ada1852","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:06:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:06:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["42f7b71fbc888ff7afea71121ea26f2ad80e45f3a0554f0090f6065a1ada1852"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f893f393c9aa43af01bbad1a129132b94c117d59114724eda74ef31ae6ce22bb"} {"level":"info","ts":"2026-07-14T16:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42f7b71fbc888ff7afea71121ea26f2ad80e45f3a0554f0090f6065a1ada1852"} {"level":"info","ts":"2026-07-14T16:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42f7b71fbc888ff7afea71121ea26f2ad80e45f3a0554f0090f6065a1ada1852","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f893f393c9aa43af01bbad1a129132b94c117d59114724eda74ef31ae6ce22bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:06:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:06:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f893f393c9aa43af01bbad1a129132b94c117d59114724eda74ef31ae6ce22bb"} {"level":"info","ts":"2026-07-14T16:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f893f393c9aa43af01bbad1a129132b94c117d59114724eda74ef31ae6ce22bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42f7b71fbc888ff7afea71121ea26f2ad80e45f3a0554f0090f6065a1ada1852","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:06:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:06:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42f7b71fbc888ff7afea71121ea26f2ad80e45f3a0554f0090f6065a1ada1852"} {"level":"info","ts":"2026-07-14T16:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42f7b71fbc888ff7afea71121ea26f2ad80e45f3a0554f0090f6065a1ada1852","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f893f393c9aa43af01bbad1a129132b94c117d59114724eda74ef31ae6ce22bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9afee5893a3b1041a26808314ce9cfffe682396fdf9eef59ef402839e25ecc34","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:06:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:06:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9afee5893a3b1041a26808314ce9cfffe682396fdf9eef59ef402839e25ecc34","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42f7b71fbc888ff7afea71121ea26f2ad80e45f3a0554f0090f6065a1ada1852","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:06:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:06:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["42f7b71fbc888ff7afea71121ea26f2ad80e45f3a0554f0090f6065a1ada1852"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f893f393c9aa43af01bbad1a129132b94c117d59114724eda74ef31ae6ce22bb"} {"level":"info","ts":"2026-07-14T16:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42f7b71fbc888ff7afea71121ea26f2ad80e45f3a0554f0090f6065a1ada1852","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f893f393c9aa43af01bbad1a129132b94c117d59114724eda74ef31ae6ce22bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:06:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:06:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f893f393c9aa43af01bbad1a129132b94c117d59114724eda74ef31ae6ce22bb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9afee5893a3b1041a26808314ce9cfffe682396fdf9eef59ef402839e25ecc34"} {"level":"info","ts":"2026-07-14T16:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f893f393c9aa43af01bbad1a129132b94c117d59114724eda74ef31ae6ce22bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9afee5893a3b1041a26808314ce9cfffe682396fdf9eef59ef402839e25ecc34","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:06:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:06:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9afee5893a3b1041a26808314ce9cfffe682396fdf9eef59ef402839e25ecc34"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42f7b71fbc888ff7afea71121ea26f2ad80e45f3a0554f0090f6065a1ada1852"} {"level":"info","ts":"2026-07-14T16:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9afee5893a3b1041a26808314ce9cfffe682396fdf9eef59ef402839e25ecc34","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42f7b71fbc888ff7afea71121ea26f2ad80e45f3a0554f0090f6065a1ada1852","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f893f393c9aa43af01bbad1a129132b94c117d59114724eda74ef31ae6ce22bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9afee5893a3b1041a26808314ce9cfffe682396fdf9eef59ef402839e25ecc34","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:06:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:06:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9afee5893a3b1041a26808314ce9cfffe682396fdf9eef59ef402839e25ecc34","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"242a19b867cab4dc090aa64de46141ac923a47039f019060097f6167f5a34e7e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:06:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:06:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9afee5893a3b1041a26808314ce9cfffe682396fdf9eef59ef402839e25ecc34"} {"level":"info","ts":"2026-07-14T16:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"242a19b867cab4dc090aa64de46141ac923a47039f019060097f6167f5a34e7e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9afee5893a3b1041a26808314ce9cfffe682396fdf9eef59ef402839e25ecc34","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:06:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:06:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9afee5893a3b1041a26808314ce9cfffe682396fdf9eef59ef402839e25ecc34"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9afee5893a3b1041a26808314ce9cfffe682396fdf9eef59ef402839e25ecc34","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"242a19b867cab4dc090aa64de46141ac923a47039f019060097f6167f5a34e7e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9afee5893a3b1041a26808314ce9cfffe682396fdf9eef59ef402839e25ecc34","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f893f393c9aa43af01bbad1a129132b94c117d59114724eda74ef31ae6ce22bb"} {"level":"debug","ts":"2026-07-14T16:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"242a19b867cab4dc090aa64de46141ac923a47039f019060097f6167f5a34e7e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:06:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:06:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/242a19b867cab4dc090aa64de46141ac923a47039f019060097f6167f5a34e7e"} {"level":"info","ts":"2026-07-14T16:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"242a19b867cab4dc090aa64de46141ac923a47039f019060097f6167f5a34e7e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"242a19b867cab4dc090aa64de46141ac923a47039f019060097f6167f5a34e7e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:06:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:06:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["242a19b867cab4dc090aa64de46141ac923a47039f019060097f6167f5a34e7e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9afee5893a3b1041a26808314ce9cfffe682396fdf9eef59ef402839e25ecc34"} {"level":"info","ts":"2026-07-14T16:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"242a19b867cab4dc090aa64de46141ac923a47039f019060097f6167f5a34e7e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"242a19b867cab4dc090aa64de46141ac923a47039f019060097f6167f5a34e7e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:06:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:06:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"242a19b867cab4dc090aa64de46141ac923a47039f019060097f6167f5a34e7e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"242a19b867cab4dc090aa64de46141ac923a47039f019060097f6167f5a34e7e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:06:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:06:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/242a19b867cab4dc090aa64de46141ac923a47039f019060097f6167f5a34e7e"} {"level":"error","ts":"2026-07-14T16:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"242a19b867cab4dc090aa64de46141ac923a47039f019060097f6167f5a34e7e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"242a19b867cab4dc090aa64de46141ac923a47039f019060097f6167f5a34e7e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T16:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"242a19b867cab4dc090aa64de46141ac923a47039f019060097f6167f5a34e7e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"242a19b867cab4dc090aa64de46141ac923a47039f019060097f6167f5a34e7e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/242a19b867cab4dc090aa64de46141ac923a47039f019060097f6167f5a34e7e"} {"level":"debug","ts":"2026-07-14T16:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"242a19b867cab4dc090aa64de46141ac923a47039f019060097f6167f5a34e7e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:06:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:06:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["242a19b867cab4dc090aa64de46141ac923a47039f019060097f6167f5a34e7e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"242a19b867cab4dc090aa64de46141ac923a47039f019060097f6167f5a34e7e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"242a19b867cab4dc090aa64de46141ac923a47039f019060097f6167f5a34e7e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/242a19b867cab4dc090aa64de46141ac923a47039f019060097f6167f5a34e7e"} {"level":"debug","ts":"2026-07-14T16:07:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"adb742abf62e24188ca13a4a0042ad0643b3f82c2828972e60f568a47d164d1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:07:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:07:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:07:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"adb742abf62e24188ca13a4a0042ad0643b3f82c2828972e60f568a47d164d1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:07:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"adb742abf62e24188ca13a4a0042ad0643b3f82c2828972e60f568a47d164d1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:07:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"adb742abf62e24188ca13a4a0042ad0643b3f82c2828972e60f568a47d164d1a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:07:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/adb742abf62e24188ca13a4a0042ad0643b3f82c2828972e60f568a47d164d1a"} {"level":"debug","ts":"2026-07-14T16:07:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"adb742abf62e24188ca13a4a0042ad0643b3f82c2828972e60f568a47d164d1a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:07:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/adb742abf62e24188ca13a4a0042ad0643b3f82c2828972e60f568a47d164d1a"} {"level":"debug","ts":"2026-07-14T16:07:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"adb742abf62e24188ca13a4a0042ad0643b3f82c2828972e60f568a47d164d1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:07:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:07:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["adb742abf62e24188ca13a4a0042ad0643b3f82c2828972e60f568a47d164d1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:07:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"adb742abf62e24188ca13a4a0042ad0643b3f82c2828972e60f568a47d164d1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:07:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"adb742abf62e24188ca13a4a0042ad0643b3f82c2828972e60f568a47d164d1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:07:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:07:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:07:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"adb742abf62e24188ca13a4a0042ad0643b3f82c2828972e60f568a47d164d1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:07:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"adb742abf62e24188ca13a4a0042ad0643b3f82c2828972e60f568a47d164d1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:07:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"adb742abf62e24188ca13a4a0042ad0643b3f82c2828972e60f568a47d164d1a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:07:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/adb742abf62e24188ca13a4a0042ad0643b3f82c2828972e60f568a47d164d1a"} {"level":"debug","ts":"2026-07-14T16:07:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"adb742abf62e24188ca13a4a0042ad0643b3f82c2828972e60f568a47d164d1a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:07:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/adb742abf62e24188ca13a4a0042ad0643b3f82c2828972e60f568a47d164d1a"} {"level":"debug","ts":"2026-07-14T16:07:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"adb742abf62e24188ca13a4a0042ad0643b3f82c2828972e60f568a47d164d1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:07:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:07:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["adb742abf62e24188ca13a4a0042ad0643b3f82c2828972e60f568a47d164d1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:07:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"adb742abf62e24188ca13a4a0042ad0643b3f82c2828972e60f568a47d164d1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:07:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"adb742abf62e24188ca13a4a0042ad0643b3f82c2828972e60f568a47d164d1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:07:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:07:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:07:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"adb742abf62e24188ca13a4a0042ad0643b3f82c2828972e60f568a47d164d1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:07:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"adb742abf62e24188ca13a4a0042ad0643b3f82c2828972e60f568a47d164d1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:07:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed2d4dd5e02d2c7ac430be91b5fb2c98203725f80eeecfc6f84759433294adac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:07:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"adb742abf62e24188ca13a4a0042ad0643b3f82c2828972e60f568a47d164d1a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:07:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/adb742abf62e24188ca13a4a0042ad0643b3f82c2828972e60f568a47d164d1a"} {"level":"debug","ts":"2026-07-14T16:07:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"adb742abf62e24188ca13a4a0042ad0643b3f82c2828972e60f568a47d164d1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:07:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:07:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["adb742abf62e24188ca13a4a0042ad0643b3f82c2828972e60f568a47d164d1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:07:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed2d4dd5e02d2c7ac430be91b5fb2c98203725f80eeecfc6f84759433294adac"} {"level":"info","ts":"2026-07-14T16:07:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"adb742abf62e24188ca13a4a0042ad0643b3f82c2828972e60f568a47d164d1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:07:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"adb742abf62e24188ca13a4a0042ad0643b3f82c2828972e60f568a47d164d1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:07:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:07:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:07:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/adb742abf62e24188ca13a4a0042ad0643b3f82c2828972e60f568a47d164d1a"} {"level":"info","ts":"2026-07-14T16:07:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"adb742abf62e24188ca13a4a0042ad0643b3f82c2828972e60f568a47d164d1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:07:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"adb742abf62e24188ca13a4a0042ad0643b3f82c2828972e60f568a47d164d1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:07:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"adb742abf62e24188ca13a4a0042ad0643b3f82c2828972e60f568a47d164d1a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:07:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/adb742abf62e24188ca13a4a0042ad0643b3f82c2828972e60f568a47d164d1a"} {"level":"debug","ts":"2026-07-14T16:07:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"adb742abf62e24188ca13a4a0042ad0643b3f82c2828972e60f568a47d164d1a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:07:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/adb742abf62e24188ca13a4a0042ad0643b3f82c2828972e60f568a47d164d1a"} {"level":"debug","ts":"2026-07-14T16:07:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"adb742abf62e24188ca13a4a0042ad0643b3f82c2828972e60f568a47d164d1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:07:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:07:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["adb742abf62e24188ca13a4a0042ad0643b3f82c2828972e60f568a47d164d1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:07:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"adb742abf62e24188ca13a4a0042ad0643b3f82c2828972e60f568a47d164d1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:07:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"adb742abf62e24188ca13a4a0042ad0643b3f82c2828972e60f568a47d164d1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:07:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:07:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:07:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"adb742abf62e24188ca13a4a0042ad0643b3f82c2828972e60f568a47d164d1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:07:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"adb742abf62e24188ca13a4a0042ad0643b3f82c2828972e60f568a47d164d1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:07:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"adb742abf62e24188ca13a4a0042ad0643b3f82c2828972e60f568a47d164d1a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:07:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/adb742abf62e24188ca13a4a0042ad0643b3f82c2828972e60f568a47d164d1a"} {"level":"debug","ts":"2026-07-14T16:07:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"adb742abf62e24188ca13a4a0042ad0643b3f82c2828972e60f568a47d164d1a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:07:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/adb742abf62e24188ca13a4a0042ad0643b3f82c2828972e60f568a47d164d1a"} {"level":"debug","ts":"2026-07-14T16:07:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"adb742abf62e24188ca13a4a0042ad0643b3f82c2828972e60f568a47d164d1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:07:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:07:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["adb742abf62e24188ca13a4a0042ad0643b3f82c2828972e60f568a47d164d1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:07:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"adb742abf62e24188ca13a4a0042ad0643b3f82c2828972e60f568a47d164d1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:07:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"adb742abf62e24188ca13a4a0042ad0643b3f82c2828972e60f568a47d164d1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:07:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:07:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:07:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"adb742abf62e24188ca13a4a0042ad0643b3f82c2828972e60f568a47d164d1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:07:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"adb742abf62e24188ca13a4a0042ad0643b3f82c2828972e60f568a47d164d1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:07:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"adb742abf62e24188ca13a4a0042ad0643b3f82c2828972e60f568a47d164d1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:07:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"adb742abf62e24188ca13a4a0042ad0643b3f82c2828972e60f568a47d164d1a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:07:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/adb742abf62e24188ca13a4a0042ad0643b3f82c2828972e60f568a47d164d1a"} {"level":"debug","ts":"2026-07-14T16:07:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1cb3f5c2cd104fc41b94f1d210a08a6fa6f77c059b984284017bd5e7ddc72e64","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:07:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/adb742abf62e24188ca13a4a0042ad0643b3f82c2828972e60f568a47d164d1a"} {"level":"debug","ts":"2026-07-14T16:07:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"adb742abf62e24188ca13a4a0042ad0643b3f82c2828972e60f568a47d164d1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:07:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:07:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["adb742abf62e24188ca13a4a0042ad0643b3f82c2828972e60f568a47d164d1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:07:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"adb742abf62e24188ca13a4a0042ad0643b3f82c2828972e60f568a47d164d1a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:07:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1cb3f5c2cd104fc41b94f1d210a08a6fa6f77c059b984284017bd5e7ddc72e64"} {"level":"debug","ts":"2026-07-14T16:07:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"adb742abf62e24188ca13a4a0042ad0643b3f82c2828972e60f568a47d164d1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:07:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:07:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"adb742abf62e24188ca13a4a0042ad0643b3f82c2828972e60f568a47d164d1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"adb742abf62e24188ca13a4a0042ad0643b3f82c2828972e60f568a47d164d1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"adb742abf62e24188ca13a4a0042ad0643b3f82c2828972e60f568a47d164d1a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/adb742abf62e24188ca13a4a0042ad0643b3f82c2828972e60f568a47d164d1a"} {"level":"debug","ts":"2026-07-14T16:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"adb742abf62e24188ca13a4a0042ad0643b3f82c2828972e60f568a47d164d1a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/adb742abf62e24188ca13a4a0042ad0643b3f82c2828972e60f568a47d164d1a"} {"level":"debug","ts":"2026-07-14T16:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"adb742abf62e24188ca13a4a0042ad0643b3f82c2828972e60f568a47d164d1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:07:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:07:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["adb742abf62e24188ca13a4a0042ad0643b3f82c2828972e60f568a47d164d1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"adb742abf62e24188ca13a4a0042ad0643b3f82c2828972e60f568a47d164d1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"adb742abf62e24188ca13a4a0042ad0643b3f82c2828972e60f568a47d164d1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:07:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:07:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"adb742abf62e24188ca13a4a0042ad0643b3f82c2828972e60f568a47d164d1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"adb742abf62e24188ca13a4a0042ad0643b3f82c2828972e60f568a47d164d1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"adb742abf62e24188ca13a4a0042ad0643b3f82c2828972e60f568a47d164d1a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/adb742abf62e24188ca13a4a0042ad0643b3f82c2828972e60f568a47d164d1a"} {"level":"debug","ts":"2026-07-14T16:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"adb742abf62e24188ca13a4a0042ad0643b3f82c2828972e60f568a47d164d1a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/adb742abf62e24188ca13a4a0042ad0643b3f82c2828972e60f568a47d164d1a"} {"level":"debug","ts":"2026-07-14T16:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4ca517fa4d820b89f8881d0634f720636d7bb68f4b68cc629679f91fd863d1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:07:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:07:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4ca517fa4d820b89f8881d0634f720636d7bb68f4b68cc629679f91fd863d1f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"adb742abf62e24188ca13a4a0042ad0643b3f82c2828972e60f568a47d164d1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:07:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:07:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["adb742abf62e24188ca13a4a0042ad0643b3f82c2828972e60f568a47d164d1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4ca517fa4d820b89f8881d0634f720636d7bb68f4b68cc629679f91fd863d1f"} {"level":"info","ts":"2026-07-14T16:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"adb742abf62e24188ca13a4a0042ad0643b3f82c2828972e60f568a47d164d1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4ca517fa4d820b89f8881d0634f720636d7bb68f4b68cc629679f91fd863d1f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"adb742abf62e24188ca13a4a0042ad0643b3f82c2828972e60f568a47d164d1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4ca517fa4d820b89f8881d0634f720636d7bb68f4b68cc629679f91fd863d1f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4ca517fa4d820b89f8881d0634f720636d7bb68f4b68cc629679f91fd863d1f"} {"level":"debug","ts":"2026-07-14T16:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4ca517fa4d820b89f8881d0634f720636d7bb68f4b68cc629679f91fd863d1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:07:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:07:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d4ca517fa4d820b89f8881d0634f720636d7bb68f4b68cc629679f91fd863d1f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/adb742abf62e24188ca13a4a0042ad0643b3f82c2828972e60f568a47d164d1a"} {"level":"info","ts":"2026-07-14T16:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4ca517fa4d820b89f8881d0634f720636d7bb68f4b68cc629679f91fd863d1f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4ca517fa4d820b89f8881d0634f720636d7bb68f4b68cc629679f91fd863d1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:07:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:07:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4ca517fa4d820b89f8881d0634f720636d7bb68f4b68cc629679f91fd863d1f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4ca517fa4d820b89f8881d0634f720636d7bb68f4b68cc629679f91fd863d1f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4ca517fa4d820b89f8881d0634f720636d7bb68f4b68cc629679f91fd863d1f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4ca517fa4d820b89f8881d0634f720636d7bb68f4b68cc629679f91fd863d1f"} {"level":"debug","ts":"2026-07-14T16:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4ca517fa4d820b89f8881d0634f720636d7bb68f4b68cc629679f91fd863d1f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4ca517fa4d820b89f8881d0634f720636d7bb68f4b68cc629679f91fd863d1f"} {"level":"debug","ts":"2026-07-14T16:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4ca517fa4d820b89f8881d0634f720636d7bb68f4b68cc629679f91fd863d1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:07:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:07:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d4ca517fa4d820b89f8881d0634f720636d7bb68f4b68cc629679f91fd863d1f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4ca517fa4d820b89f8881d0634f720636d7bb68f4b68cc629679f91fd863d1f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4ca517fa4d820b89f8881d0634f720636d7bb68f4b68cc629679f91fd863d1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:07:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:07:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4ca517fa4d820b89f8881d0634f720636d7bb68f4b68cc629679f91fd863d1f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4ca517fa4d820b89f8881d0634f720636d7bb68f4b68cc629679f91fd863d1f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4ca517fa4d820b89f8881d0634f720636d7bb68f4b68cc629679f91fd863d1f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4ca517fa4d820b89f8881d0634f720636d7bb68f4b68cc629679f91fd863d1f"} {"level":"debug","ts":"2026-07-14T16:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b657f31bbbe946923747ef8b02fc76431319161dd75972e9c165a566a0044818","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4ca517fa4d820b89f8881d0634f720636d7bb68f4b68cc629679f91fd863d1f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4ca517fa4d820b89f8881d0634f720636d7bb68f4b68cc629679f91fd863d1f"} {"level":"debug","ts":"2026-07-14T16:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4a5a13d791e74d1fbd26c2b91798157ecaa2ebe9cb36c836e3b1b3ce2ec78fe","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b657f31bbbe946923747ef8b02fc76431319161dd75972e9c165a566a0044818"} {"level":"debug","ts":"2026-07-14T16:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4ca517fa4d820b89f8881d0634f720636d7bb68f4b68cc629679f91fd863d1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:07:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:07:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d4ca517fa4d820b89f8881d0634f720636d7bb68f4b68cc629679f91fd863d1f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4a5a13d791e74d1fbd26c2b91798157ecaa2ebe9cb36c836e3b1b3ce2ec78fe"} {"level":"info","ts":"2026-07-14T16:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4ca517fa4d820b89f8881d0634f720636d7bb68f4b68cc629679f91fd863d1f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4ca517fa4d820b89f8881d0634f720636d7bb68f4b68cc629679f91fd863d1f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4ca517fa4d820b89f8881d0634f720636d7bb68f4b68cc629679f91fd863d1f"} {"level":"debug","ts":"2026-07-14T16:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08c716f376269ee13189abce2fa2a60d1f1f8d629c7fede921191d5b8bc6e4b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:07:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:07:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08c716f376269ee13189abce2fa2a60d1f1f8d629c7fede921191d5b8bc6e4b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08c716f376269ee13189abce2fa2a60d1f1f8d629c7fede921191d5b8bc6e4b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08c716f376269ee13189abce2fa2a60d1f1f8d629c7fede921191d5b8bc6e4b7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08c716f376269ee13189abce2fa2a60d1f1f8d629c7fede921191d5b8bc6e4b7"} {"level":"debug","ts":"2026-07-14T16:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08c716f376269ee13189abce2fa2a60d1f1f8d629c7fede921191d5b8bc6e4b7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08c716f376269ee13189abce2fa2a60d1f1f8d629c7fede921191d5b8bc6e4b7"} {"level":"debug","ts":"2026-07-14T16:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08c716f376269ee13189abce2fa2a60d1f1f8d629c7fede921191d5b8bc6e4b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:07:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:07:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["08c716f376269ee13189abce2fa2a60d1f1f8d629c7fede921191d5b8bc6e4b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08c716f376269ee13189abce2fa2a60d1f1f8d629c7fede921191d5b8bc6e4b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08c716f376269ee13189abce2fa2a60d1f1f8d629c7fede921191d5b8bc6e4b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:07:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:07:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08c716f376269ee13189abce2fa2a60d1f1f8d629c7fede921191d5b8bc6e4b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a60eb64576bebc52a3e19344029d35bf5d546e32d1fa5673546e8be3dccbd3c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08c716f376269ee13189abce2fa2a60d1f1f8d629c7fede921191d5b8bc6e4b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08c716f376269ee13189abce2fa2a60d1f1f8d629c7fede921191d5b8bc6e4b7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08c716f376269ee13189abce2fa2a60d1f1f8d629c7fede921191d5b8bc6e4b7"} {"level":"debug","ts":"2026-07-14T16:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08c716f376269ee13189abce2fa2a60d1f1f8d629c7fede921191d5b8bc6e4b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:07:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:07:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["08c716f376269ee13189abce2fa2a60d1f1f8d629c7fede921191d5b8bc6e4b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a60eb64576bebc52a3e19344029d35bf5d546e32d1fa5673546e8be3dccbd3c"} {"level":"info","ts":"2026-07-14T16:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08c716f376269ee13189abce2fa2a60d1f1f8d629c7fede921191d5b8bc6e4b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08c716f376269ee13189abce2fa2a60d1f1f8d629c7fede921191d5b8bc6e4b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:07:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:07:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08c716f376269ee13189abce2fa2a60d1f1f8d629c7fede921191d5b8bc6e4b7"} {"level":"info","ts":"2026-07-14T16:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08c716f376269ee13189abce2fa2a60d1f1f8d629c7fede921191d5b8bc6e4b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08c716f376269ee13189abce2fa2a60d1f1f8d629c7fede921191d5b8bc6e4b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08c716f376269ee13189abce2fa2a60d1f1f8d629c7fede921191d5b8bc6e4b7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08c716f376269ee13189abce2fa2a60d1f1f8d629c7fede921191d5b8bc6e4b7"} {"level":"debug","ts":"2026-07-14T16:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08c716f376269ee13189abce2fa2a60d1f1f8d629c7fede921191d5b8bc6e4b7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08c716f376269ee13189abce2fa2a60d1f1f8d629c7fede921191d5b8bc6e4b7"} {"level":"debug","ts":"2026-07-14T16:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c2bb13c2dd3e1c51a69db9c88375f062d67de98a5ead5f01c5d00c0dab0c3c7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08c716f376269ee13189abce2fa2a60d1f1f8d629c7fede921191d5b8bc6e4b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:07:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:07:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["08c716f376269ee13189abce2fa2a60d1f1f8d629c7fede921191d5b8bc6e4b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c2bb13c2dd3e1c51a69db9c88375f062d67de98a5ead5f01c5d00c0dab0c3c7"} {"level":"info","ts":"2026-07-14T16:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08c716f376269ee13189abce2fa2a60d1f1f8d629c7fede921191d5b8bc6e4b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08c716f376269ee13189abce2fa2a60d1f1f8d629c7fede921191d5b8bc6e4b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:07:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:07:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08c716f376269ee13189abce2fa2a60d1f1f8d629c7fede921191d5b8bc6e4b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08c716f376269ee13189abce2fa2a60d1f1f8d629c7fede921191d5b8bc6e4b7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08c716f376269ee13189abce2fa2a60d1f1f8d629c7fede921191d5b8bc6e4b7"} {"level":"debug","ts":"2026-07-14T16:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08c716f376269ee13189abce2fa2a60d1f1f8d629c7fede921191d5b8bc6e4b7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08c716f376269ee13189abce2fa2a60d1f1f8d629c7fede921191d5b8bc6e4b7"} {"level":"debug","ts":"2026-07-14T16:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08c716f376269ee13189abce2fa2a60d1f1f8d629c7fede921191d5b8bc6e4b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:07:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:07:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["08c716f376269ee13189abce2fa2a60d1f1f8d629c7fede921191d5b8bc6e4b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08c716f376269ee13189abce2fa2a60d1f1f8d629c7fede921191d5b8bc6e4b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08c716f376269ee13189abce2fa2a60d1f1f8d629c7fede921191d5b8bc6e4b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:07:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:07:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08c716f376269ee13189abce2fa2a60d1f1f8d629c7fede921191d5b8bc6e4b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5b05ed6e07911d55921760ef3be7ea311041109200e71fc48f426a333425088","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08c716f376269ee13189abce2fa2a60d1f1f8d629c7fede921191d5b8bc6e4b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"242a19b867cab4dc090aa64de46141ac923a47039f019060097f6167f5a34e7e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08c716f376269ee13189abce2fa2a60d1f1f8d629c7fede921191d5b8bc6e4b7"} {"level":"debug","ts":"2026-07-14T16:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08c716f376269ee13189abce2fa2a60d1f1f8d629c7fede921191d5b8bc6e4b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:07:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:07:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["08c716f376269ee13189abce2fa2a60d1f1f8d629c7fede921191d5b8bc6e4b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T16:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08c716f376269ee13189abce2fa2a60d1f1f8d629c7fede921191d5b8bc6e4b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08c716f376269ee13189abce2fa2a60d1f1f8d629c7fede921191d5b8bc6e4b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c84349e322ffbfbc8de20fd8b935d1f6a5c90b439b02ba0006c93308931f62f0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5b05ed6e07911d55921760ef3be7ea311041109200e71fc48f426a333425088"} {"level":"info","ts":"2026-07-14T16:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/242a19b867cab4dc090aa64de46141ac923a47039f019060097f6167f5a34e7e"} {"level":"info","ts":"2026-07-14T16:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08c716f376269ee13189abce2fa2a60d1f1f8d629c7fede921191d5b8bc6e4b7"} {"level":"debug","ts":"2026-07-14T16:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9afee5893a3b1041a26808314ce9cfffe682396fdf9eef59ef402839e25ecc34","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c84349e322ffbfbc8de20fd8b935d1f6a5c90b439b02ba0006c93308931f62f0"} {"level":"debug","ts":"2026-07-14T16:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eca739f7599a631ecaa0ecbaf54ddde56b7ff90cfc81d947110b067517ac0abd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9afee5893a3b1041a26808314ce9cfffe682396fdf9eef59ef402839e25ecc34"} {"level":"debug","ts":"2026-07-14T16:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f893f393c9aa43af01bbad1a129132b94c117d59114724eda74ef31ae6ce22bb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eca739f7599a631ecaa0ecbaf54ddde56b7ff90cfc81d947110b067517ac0abd"} {"level":"debug","ts":"2026-07-14T16:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d78045e31bb96dfddc6812b999afcd4b2098b84b728fb6750be4998291ca1ff1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e443cf22db2f76e4552c0713ca704cb6c52233cd136bce913280ea464befbd85","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f893f393c9aa43af01bbad1a129132b94c117d59114724eda74ef31ae6ce22bb"} {"level":"debug","ts":"2026-07-14T16:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc57175700ab457fddd972f579c87c640cdf2a48ca10c986490fc4e1ac1e4c7f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d78045e31bb96dfddc6812b999afcd4b2098b84b728fb6750be4998291ca1ff1"} {"level":"debug","ts":"2026-07-14T16:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"faa879c4b4e334223c1dd469f04e9192a422ec1a70b1c53800e23afb6eb06e58","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e443cf22db2f76e4552c0713ca704cb6c52233cd136bce913280ea464befbd85"} {"level":"debug","ts":"2026-07-14T16:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78cf544cc3af549b4d067d80bf3c4b030553ca9b28afeef15b07706627b15925","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc57175700ab457fddd972f579c87c640cdf2a48ca10c986490fc4e1ac1e4c7f"} {"level":"debug","ts":"2026-07-14T16:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95f26a37dce6f0d8628fdec3adbd2d0c59e10b83f2268a2fef379518f5986ab1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T16:07:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42f7b71fbc888ff7afea71121ea26f2ad80e45f3a0554f0090f6065a1ada1852","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:07:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/faa879c4b4e334223c1dd469f04e9192a422ec1a70b1c53800e23afb6eb06e58"} {"level":"debug","ts":"2026-07-14T16:07:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6c67852148f3fcef75b97609a07066824f31bdfbcd51e77443505bffffaa853","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:07:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78cf544cc3af549b4d067d80bf3c4b030553ca9b28afeef15b07706627b15925"} {"level":"info","ts":"2026-07-14T16:07:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95f26a37dce6f0d8628fdec3adbd2d0c59e10b83f2268a2fef379518f5986ab1"} {"level":"debug","ts":"2026-07-14T16:07:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f48db350da2042b132c764b885f99e314c51bb77addcc64947387e95d230dee9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T16:07:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42f7b71fbc888ff7afea71121ea26f2ad80e45f3a0554f0090f6065a1ada1852"} {"level":"info","ts":"2026-07-14T16:07:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6c67852148f3fcef75b97609a07066824f31bdfbcd51e77443505bffffaa853"} {"level":"info","ts":"2026-07-14T16:07:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f48db350da2042b132c764b885f99e314c51bb77addcc64947387e95d230dee9"} {"level":"info","ts":"2026-07-14T16:07:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1714c7d5-ece6-4934-8c42-86c950671baa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:43546","PortSpecifier":{"PortValue":43546}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1714c7d5-ece6-4934-8c42-86c950671baa","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-bea800.apps.bef11670-107b-4509-941d-05c0a92404fb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T16:07:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1714c7d5-ece6-4934-8c42-86c950671baa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:43546","PortSpecifier":{"PortValue":43546}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784045242,"nanos":173188736},"http":{"id":"1714c7d5-ece6-4934-8c42-86c950671baa","method":"POST","headers":{":authority":"e2e-shared-a-bea800.apps.bef11670-107b-4509-941d-05c0a92404fb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T16:07:22Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1714c7d5-ece6-4934-8c42-86c950671baa","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T16:07:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1714c7d5-ece6-4934-8c42-86c950671baa","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"26fbefcd-1f3f-4523-899a-2d5408ecb467","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3165f2a7-c048-415b-a85c-a215d11d2af8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/05c0a92404fb"]}} {"level":"debug","ts":"2026-07-14T16:07:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1714c7d5-ece6-4934-8c42-86c950671baa","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/05c0a92404fb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3165f2a7-c048-415b-a85c-a215d11d2af8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"26fbefcd-1f3f-4523-899a-2d5408ecb467","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"dc57175700ab457fddd972f579c87c640cdf2a48ca10c986490fc4e1ac1e4c7f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.76:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-bea800.apps.bef11670-107b-4509-941d-05c0a92404fb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T16:07:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1714c7d5-ece6-4934-8c42-86c950671baa","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T16:07:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1714c7d5-ece6-4934-8c42-86c950671baa","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T16:07:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1714c7d5-ece6-4934-8c42-86c950671baa","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bea800/rate-test-model-bea800\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-bea800/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T16:07:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1714c7d5-ece6-4934-8c42-86c950671baa","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T16:07:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1714c7d5-ece6-4934-8c42-86c950671baa","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T16:07:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1714c7d5-ece6-4934-8c42-86c950671baa","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T16:07:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1714c7d5-ece6-4934-8c42-86c950671baa","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T16:07:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1714c7d5-ece6-4934-8c42-86c950671baa","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T16:07:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0294f820-a895-407c-9e4d-6ac2be24c8ff","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:50426","PortSpecifier":{"PortValue":50426}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.78:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0294f820-a895-407c-9e4d-6ac2be24c8ff","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-519447.apps.bef11670-107b-4509-941d-05c0a92404fb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T16:07:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0294f820-a895-407c-9e4d-6ac2be24c8ff","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:50426","PortSpecifier":{"PortValue":50426}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.78:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784045242,"nanos":216222270},"http":{"id":"0294f820-a895-407c-9e4d-6ac2be24c8ff","method":"POST","headers":{":authority":"e2e-shared-b-519447.apps.bef11670-107b-4509-941d-05c0a92404fb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T16:07:22Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0294f820-a895-407c-9e4d-6ac2be24c8ff","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T16:07:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0294f820-a895-407c-9e4d-6ac2be24c8ff","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"26fbefcd-1f3f-4523-899a-2d5408ecb467","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3165f2a7-c048-415b-a85c-a215d11d2af8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/05c0a92404fb"]}} {"level":"debug","ts":"2026-07-14T16:07:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0294f820-a895-407c-9e4d-6ac2be24c8ff","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/05c0a92404fb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3165f2a7-c048-415b-a85c-a215d11d2af8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"26fbefcd-1f3f-4523-899a-2d5408ecb467","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"adb742abf62e24188ca13a4a0042ad0643b3f82c2828972e60f568a47d164d1a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.78:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-519447.apps.bef11670-107b-4509-941d-05c0a92404fb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T16:07:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0294f820-a895-407c-9e4d-6ac2be24c8ff","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T16:07:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0294f820-a895-407c-9e4d-6ac2be24c8ff","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T16:07:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0294f820-a895-407c-9e4d-6ac2be24c8ff","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-519447/rate-test-model-519447\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-519447/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T16:07:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0294f820-a895-407c-9e4d-6ac2be24c8ff","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T16:07:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0294f820-a895-407c-9e4d-6ac2be24c8ff","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T16:07:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0294f820-a895-407c-9e4d-6ac2be24c8ff","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T16:07:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0294f820-a895-407c-9e4d-6ac2be24c8ff","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T16:07:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0294f820-a895-407c-9e4d-6ac2be24c8ff","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T16:07:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9e38799f-ac2f-4a5b-a63c-03945c10b589","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:43550","PortSpecifier":{"PortValue":43550}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9e38799f-ac2f-4a5b-a63c-03945c10b589","method":"POST","path":"/ai-tenant-e2e-shared-a-bea800/rate-test-model-bea800/v1/completions","host":"e2e-shared-a-bea800.apps.bef11670-107b-4509-941d-05c0a92404fb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T16:07:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9e38799f-ac2f-4a5b-a63c-03945c10b589","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:43550","PortSpecifier":{"PortValue":43550}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784045242,"nanos":256966411},"http":{"id":"9e38799f-ac2f-4a5b-a63c-03945c10b589","method":"POST","headers":{":authority":"e2e-shared-a-bea800.apps.bef11670-107b-4509-941d-05c0a92404fb.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-bea800/rate-test-model-bea800/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T16:07:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9e38799f-ac2f-4a5b-a63c-03945c10b589","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1RSkaMwtNMPTmKUPG_RvCyjaVRViKkuKz67NqGAloksidI0mmqiD8c7iyS4SO"} {"level":"debug","ts":"2026-07-14T16:07:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9e38799f-ac2f-4a5b-a63c-03945c10b589","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-bea800.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1RSkaMwtNMPTmKUPG_RvCyjaVRViKkuKz67NqGAloksidI0mmqiD8c7iyS4SO\"}"} {"level":"debug","ts":"2026-07-14T16:07:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9e38799f-ac2f-4a5b-a63c-03945c10b589","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bea800.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4d995065-2f21-4166-96a3-c8d096e0912e","keyName":"e2e-rate-a-3e537d","subscription":"e2e-rate-iso-a-3e537d","tenant":"e2e-shared-a-bea800","userId":"4d995065-2f21-4166-96a3-c8d096e0912e","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T16:07:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9e38799f-ac2f-4a5b-a63c-03945c10b589","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-bea800.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-bea800/rate-test-model-bea800\",\"requestedSubscription\":\"e2e-rate-iso-a-3e537d\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-14T16:07:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9e38799f-ac2f-4a5b-a63c-03945c10b589","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bea800.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-bea800","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3e537d","namespace":"ai-tenant-e2e-shared-a-bea800","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-14T16:07:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9e38799f-ac2f-4a5b-a63c-03945c10b589","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T16:07:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9e38799f-ac2f-4a5b-a63c-03945c10b589","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T16:07:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9e38799f-ac2f-4a5b-a63c-03945c10b589","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T16:07:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9e38799f-ac2f-4a5b-a63c-03945c10b589","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T16:07:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9e38799f-ac2f-4a5b-a63c-03945c10b589","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bea800/rate-test-model-bea800\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-bea800/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T16:07:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9e38799f-ac2f-4a5b-a63c-03945c10b589","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T16:07:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9e38799f-ac2f-4a5b-a63c-03945c10b589","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-3e537d"} {"level":"debug","ts":"2026-07-14T16:07:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9e38799f-ac2f-4a5b-a63c-03945c10b589","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T16:07:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9e38799f-ac2f-4a5b-a63c-03945c10b589","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"4d995065-2f21-4166-96a3-c8d096e0912e","keyName":"e2e-rate-a-3e537d","selected_subscription":"e2e-rate-iso-a-3e537d","selected_subscription_key":"ai-tenant-e2e-shared-a-bea800/e2e-rate-iso-a-3e537d@ai-tenant-e2e-shared-a-bea800/rate-test-model-bea800","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-bea800","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3e537d","namespace":"ai-tenant-e2e-shared-a-bea800","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-14T16:07:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9e38799f-ac2f-4a5b-a63c-03945c10b589","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T16:07:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9e38799f-ac2f-4a5b-a63c-03945c10b589","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T16:07:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b4b00bd5-f06b-4db8-99a6-7add5d5a3ce7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:43560","PortSpecifier":{"PortValue":43560}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b4b00bd5-f06b-4db8-99a6-7add5d5a3ce7","method":"POST","path":"/ai-tenant-e2e-shared-a-bea800/rate-test-model-bea800/v1/completions","host":"e2e-shared-a-bea800.apps.bef11670-107b-4509-941d-05c0a92404fb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T16:07:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b4b00bd5-f06b-4db8-99a6-7add5d5a3ce7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:43560","PortSpecifier":{"PortValue":43560}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784045243,"nanos":329258016},"http":{"id":"b4b00bd5-f06b-4db8-99a6-7add5d5a3ce7","method":"POST","headers":{":authority":"e2e-shared-a-bea800.apps.bef11670-107b-4509-941d-05c0a92404fb.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-bea800/rate-test-model-bea800/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T16:07:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b4b00bd5-f06b-4db8-99a6-7add5d5a3ce7","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1RSkaMwtNMPTmKUPG_RvCyjaVRViKkuKz67NqGAloksidI0mmqiD8c7iyS4SO"} {"level":"debug","ts":"2026-07-14T16:07:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b4b00bd5-f06b-4db8-99a6-7add5d5a3ce7","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-bea800.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1RSkaMwtNMPTmKUPG_RvCyjaVRViKkuKz67NqGAloksidI0mmqiD8c7iyS4SO\"}"} {"level":"debug","ts":"2026-07-14T16:07:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b4b00bd5-f06b-4db8-99a6-7add5d5a3ce7","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bea800.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4d995065-2f21-4166-96a3-c8d096e0912e","keyName":"e2e-rate-a-3e537d","subscription":"e2e-rate-iso-a-3e537d","tenant":"e2e-shared-a-bea800","userId":"4d995065-2f21-4166-96a3-c8d096e0912e","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T16:07:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b4b00bd5-f06b-4db8-99a6-7add5d5a3ce7","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-bea800.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-bea800/rate-test-model-bea800\",\"requestedSubscription\":\"e2e-rate-iso-a-3e537d\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-14T16:07:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b4b00bd5-f06b-4db8-99a6-7add5d5a3ce7","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bea800.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-bea800","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3e537d","namespace":"ai-tenant-e2e-shared-a-bea800","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-14T16:07:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b4b00bd5-f06b-4db8-99a6-7add5d5a3ce7","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T16:07:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b4b00bd5-f06b-4db8-99a6-7add5d5a3ce7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T16:07:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b4b00bd5-f06b-4db8-99a6-7add5d5a3ce7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T16:07:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b4b00bd5-f06b-4db8-99a6-7add5d5a3ce7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bea800/rate-test-model-bea800\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-bea800/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T16:07:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b4b00bd5-f06b-4db8-99a6-7add5d5a3ce7","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T16:07:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b4b00bd5-f06b-4db8-99a6-7add5d5a3ce7","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-3e537d"} {"level":"debug","ts":"2026-07-14T16:07:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b4b00bd5-f06b-4db8-99a6-7add5d5a3ce7","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T16:07:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b4b00bd5-f06b-4db8-99a6-7add5d5a3ce7","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T16:07:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b4b00bd5-f06b-4db8-99a6-7add5d5a3ce7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"4d995065-2f21-4166-96a3-c8d096e0912e","keyName":"e2e-rate-a-3e537d","selected_subscription":"e2e-rate-iso-a-3e537d","selected_subscription_key":"ai-tenant-e2e-shared-a-bea800/e2e-rate-iso-a-3e537d@ai-tenant-e2e-shared-a-bea800/rate-test-model-bea800","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-bea800","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3e537d","namespace":"ai-tenant-e2e-shared-a-bea800","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-14T16:07:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b4b00bd5-f06b-4db8-99a6-7add5d5a3ce7","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T16:07:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b4b00bd5-f06b-4db8-99a6-7add5d5a3ce7","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T16:07:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b9a894e6-9b0a-490e-9829-55a217839a06","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:43568","PortSpecifier":{"PortValue":43568}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b9a894e6-9b0a-490e-9829-55a217839a06","method":"POST","path":"/ai-tenant-e2e-shared-a-bea800/rate-test-model-bea800/v1/completions","host":"e2e-shared-a-bea800.apps.bef11670-107b-4509-941d-05c0a92404fb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T16:07:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b9a894e6-9b0a-490e-9829-55a217839a06","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:43568","PortSpecifier":{"PortValue":43568}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784045244,"nanos":369976009},"http":{"id":"b9a894e6-9b0a-490e-9829-55a217839a06","method":"POST","headers":{":authority":"e2e-shared-a-bea800.apps.bef11670-107b-4509-941d-05c0a92404fb.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-bea800/rate-test-model-bea800/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T16:07:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b9a894e6-9b0a-490e-9829-55a217839a06","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1RSkaMwtNMPTmKUPG_RvCyjaVRViKkuKz67NqGAloksidI0mmqiD8c7iyS4SO"} {"level":"debug","ts":"2026-07-14T16:07:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b9a894e6-9b0a-490e-9829-55a217839a06","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-bea800.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1RSkaMwtNMPTmKUPG_RvCyjaVRViKkuKz67NqGAloksidI0mmqiD8c7iyS4SO\"}"} {"level":"debug","ts":"2026-07-14T16:07:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b9a894e6-9b0a-490e-9829-55a217839a06","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bea800.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4d995065-2f21-4166-96a3-c8d096e0912e","keyName":"e2e-rate-a-3e537d","subscription":"e2e-rate-iso-a-3e537d","tenant":"e2e-shared-a-bea800","userId":"4d995065-2f21-4166-96a3-c8d096e0912e","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T16:07:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b9a894e6-9b0a-490e-9829-55a217839a06","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-bea800.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-bea800/rate-test-model-bea800\",\"requestedSubscription\":\"e2e-rate-iso-a-3e537d\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-14T16:07:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b9a894e6-9b0a-490e-9829-55a217839a06","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bea800.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-bea800","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3e537d","namespace":"ai-tenant-e2e-shared-a-bea800","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-14T16:07:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b9a894e6-9b0a-490e-9829-55a217839a06","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T16:07:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b9a894e6-9b0a-490e-9829-55a217839a06","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T16:07:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b9a894e6-9b0a-490e-9829-55a217839a06","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T16:07:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b9a894e6-9b0a-490e-9829-55a217839a06","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T16:07:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b9a894e6-9b0a-490e-9829-55a217839a06","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bea800/rate-test-model-bea800\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-bea800/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T16:07:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b9a894e6-9b0a-490e-9829-55a217839a06","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T16:07:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b9a894e6-9b0a-490e-9829-55a217839a06","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-3e537d"} {"level":"debug","ts":"2026-07-14T16:07:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b9a894e6-9b0a-490e-9829-55a217839a06","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T16:07:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b9a894e6-9b0a-490e-9829-55a217839a06","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"4d995065-2f21-4166-96a3-c8d096e0912e","keyName":"e2e-rate-a-3e537d","selected_subscription":"e2e-rate-iso-a-3e537d","selected_subscription_key":"ai-tenant-e2e-shared-a-bea800/e2e-rate-iso-a-3e537d@ai-tenant-e2e-shared-a-bea800/rate-test-model-bea800","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-bea800","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3e537d","namespace":"ai-tenant-e2e-shared-a-bea800","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-14T16:07:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b9a894e6-9b0a-490e-9829-55a217839a06","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T16:07:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b9a894e6-9b0a-490e-9829-55a217839a06","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T16:07:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0f50045e-7352-4431-8061-6d682db07205","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:39216","PortSpecifier":{"PortValue":39216}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0f50045e-7352-4431-8061-6d682db07205","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-bea800.apps.bef11670-107b-4509-941d-05c0a92404fb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T16:07:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0f50045e-7352-4431-8061-6d682db07205","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:39216","PortSpecifier":{"PortValue":39216}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784045257,"nanos":459773434},"http":{"id":"0f50045e-7352-4431-8061-6d682db07205","method":"POST","headers":{":authority":"e2e-shared-a-bea800.apps.bef11670-107b-4509-941d-05c0a92404fb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T16:07:37Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0f50045e-7352-4431-8061-6d682db07205","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T16:07:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0f50045e-7352-4431-8061-6d682db07205","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"26fbefcd-1f3f-4523-899a-2d5408ecb467","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3165f2a7-c048-415b-a85c-a215d11d2af8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/05c0a92404fb"]}} {"level":"debug","ts":"2026-07-14T16:07:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0f50045e-7352-4431-8061-6d682db07205","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/05c0a92404fb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3165f2a7-c048-415b-a85c-a215d11d2af8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"26fbefcd-1f3f-4523-899a-2d5408ecb467","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"dc57175700ab457fddd972f579c87c640cdf2a48ca10c986490fc4e1ac1e4c7f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.76:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-bea800.apps.bef11670-107b-4509-941d-05c0a92404fb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T16:07:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0f50045e-7352-4431-8061-6d682db07205","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T16:07:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0f50045e-7352-4431-8061-6d682db07205","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T16:07:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0f50045e-7352-4431-8061-6d682db07205","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bea800/rate-test-model-bea800\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-bea800/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T16:07:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0f50045e-7352-4431-8061-6d682db07205","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T16:07:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0f50045e-7352-4431-8061-6d682db07205","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T16:07:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0f50045e-7352-4431-8061-6d682db07205","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T16:07:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0f50045e-7352-4431-8061-6d682db07205","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T16:07:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0f50045e-7352-4431-8061-6d682db07205","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T16:07:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7be517f8-8388-4867-84e6-f14d01696660","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:60926","PortSpecifier":{"PortValue":60926}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.78:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7be517f8-8388-4867-84e6-f14d01696660","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-519447.apps.bef11670-107b-4509-941d-05c0a92404fb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T16:07:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7be517f8-8388-4867-84e6-f14d01696660","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:60926","PortSpecifier":{"PortValue":60926}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.78:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784045257,"nanos":503375739},"http":{"id":"7be517f8-8388-4867-84e6-f14d01696660","method":"POST","headers":{":authority":"e2e-shared-b-519447.apps.bef11670-107b-4509-941d-05c0a92404fb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T16:07:37Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7be517f8-8388-4867-84e6-f14d01696660","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T16:07:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7be517f8-8388-4867-84e6-f14d01696660","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"26fbefcd-1f3f-4523-899a-2d5408ecb467","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3165f2a7-c048-415b-a85c-a215d11d2af8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/05c0a92404fb"]}} {"level":"debug","ts":"2026-07-14T16:07:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7be517f8-8388-4867-84e6-f14d01696660","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/05c0a92404fb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3165f2a7-c048-415b-a85c-a215d11d2af8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"26fbefcd-1f3f-4523-899a-2d5408ecb467","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"adb742abf62e24188ca13a4a0042ad0643b3f82c2828972e60f568a47d164d1a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.78:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-519447.apps.bef11670-107b-4509-941d-05c0a92404fb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T16:07:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7be517f8-8388-4867-84e6-f14d01696660","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T16:07:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7be517f8-8388-4867-84e6-f14d01696660","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T16:07:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7be517f8-8388-4867-84e6-f14d01696660","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-519447/rate-test-model-519447\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-519447/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T16:07:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7be517f8-8388-4867-84e6-f14d01696660","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T16:07:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7be517f8-8388-4867-84e6-f14d01696660","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T16:07:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7be517f8-8388-4867-84e6-f14d01696660","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T16:07:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7be517f8-8388-4867-84e6-f14d01696660","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T16:07:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7be517f8-8388-4867-84e6-f14d01696660","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T16:07:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3f1f5ccc-ea60-4f30-b325-7e4a1f428757","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:39226","PortSpecifier":{"PortValue":39226}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3f1f5ccc-ea60-4f30-b325-7e4a1f428757","method":"POST","path":"/ai-tenant-e2e-shared-a-bea800/rate-test-model-bea800/v1/completions","host":"e2e-shared-a-bea800.apps.bef11670-107b-4509-941d-05c0a92404fb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T16:07:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3f1f5ccc-ea60-4f30-b325-7e4a1f428757","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:39226","PortSpecifier":{"PortValue":39226}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784045257,"nanos":545870359},"http":{"id":"3f1f5ccc-ea60-4f30-b325-7e4a1f428757","method":"POST","headers":{":authority":"e2e-shared-a-bea800.apps.bef11670-107b-4509-941d-05c0a92404fb.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-bea800/rate-test-model-bea800/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T16:07:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3f1f5ccc-ea60-4f30-b325-7e4a1f428757","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1GFQXcuNO7JbAPrCs_jRd2lBmlzkOK4RjNzeBYt4P9EIqeQht4922FAvHwq5"} {"level":"debug","ts":"2026-07-14T16:07:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3f1f5ccc-ea60-4f30-b325-7e4a1f428757","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-bea800.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1GFQXcuNO7JbAPrCs_jRd2lBmlzkOK4RjNzeBYt4P9EIqeQht4922FAvHwq5\"}"} {"level":"debug","ts":"2026-07-14T16:07:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3f1f5ccc-ea60-4f30-b325-7e4a1f428757","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bea800.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ec63b563-f4d0-453a-aece-a5c6c6da9c70","keyName":"e2e-rate-a-3d9d9b","subscription":"e2e-rate-iso-a-3d9d9b","tenant":"e2e-shared-a-bea800","userId":"ec63b563-f4d0-453a-aece-a5c6c6da9c70","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T16:07:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3f1f5ccc-ea60-4f30-b325-7e4a1f428757","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-bea800.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-bea800/rate-test-model-bea800\",\"requestedSubscription\":\"e2e-rate-iso-a-3d9d9b\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-14T16:07:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3f1f5ccc-ea60-4f30-b325-7e4a1f428757","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bea800.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-bea800","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3d9d9b","namespace":"ai-tenant-e2e-shared-a-bea800","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-14T16:07:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3f1f5ccc-ea60-4f30-b325-7e4a1f428757","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T16:07:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3f1f5ccc-ea60-4f30-b325-7e4a1f428757","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T16:07:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3f1f5ccc-ea60-4f30-b325-7e4a1f428757","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T16:07:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3f1f5ccc-ea60-4f30-b325-7e4a1f428757","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bea800/rate-test-model-bea800\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-bea800/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T16:07:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3f1f5ccc-ea60-4f30-b325-7e4a1f428757","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T16:07:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3f1f5ccc-ea60-4f30-b325-7e4a1f428757","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-3d9d9b"} {"level":"debug","ts":"2026-07-14T16:07:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3f1f5ccc-ea60-4f30-b325-7e4a1f428757","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T16:07:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3f1f5ccc-ea60-4f30-b325-7e4a1f428757","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T16:07:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3f1f5ccc-ea60-4f30-b325-7e4a1f428757","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"ec63b563-f4d0-453a-aece-a5c6c6da9c70","keyName":"e2e-rate-a-3d9d9b","selected_subscription":"e2e-rate-iso-a-3d9d9b","selected_subscription_key":"ai-tenant-e2e-shared-a-bea800/e2e-rate-iso-a-3d9d9b@ai-tenant-e2e-shared-a-bea800/rate-test-model-bea800","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-bea800","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3d9d9b","namespace":"ai-tenant-e2e-shared-a-bea800","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-14T16:07:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3f1f5ccc-ea60-4f30-b325-7e4a1f428757","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T16:07:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3f1f5ccc-ea60-4f30-b325-7e4a1f428757","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T16:07:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f98cc059-1f19-4d91-b70d-2c8054845270","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:39228","PortSpecifier":{"PortValue":39228}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f98cc059-1f19-4d91-b70d-2c8054845270","method":"POST","path":"/ai-tenant-e2e-shared-a-bea800/rate-test-model-bea800/v1/completions","host":"e2e-shared-a-bea800.apps.bef11670-107b-4509-941d-05c0a92404fb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T16:07:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f98cc059-1f19-4d91-b70d-2c8054845270","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:39228","PortSpecifier":{"PortValue":39228}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784045258,"nanos":591318089},"http":{"id":"f98cc059-1f19-4d91-b70d-2c8054845270","method":"POST","headers":{":authority":"e2e-shared-a-bea800.apps.bef11670-107b-4509-941d-05c0a92404fb.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-bea800/rate-test-model-bea800/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T16:07:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f98cc059-1f19-4d91-b70d-2c8054845270","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1GFQXcuNO7JbAPrCs_jRd2lBmlzkOK4RjNzeBYt4P9EIqeQht4922FAvHwq5"} {"level":"debug","ts":"2026-07-14T16:07:38Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f98cc059-1f19-4d91-b70d-2c8054845270","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-bea800.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1GFQXcuNO7JbAPrCs_jRd2lBmlzkOK4RjNzeBYt4P9EIqeQht4922FAvHwq5\"}"} {"level":"debug","ts":"2026-07-14T16:07:38Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f98cc059-1f19-4d91-b70d-2c8054845270","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bea800.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ec63b563-f4d0-453a-aece-a5c6c6da9c70","keyName":"e2e-rate-a-3d9d9b","subscription":"e2e-rate-iso-a-3d9d9b","tenant":"e2e-shared-a-bea800","userId":"ec63b563-f4d0-453a-aece-a5c6c6da9c70","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T16:07:38Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f98cc059-1f19-4d91-b70d-2c8054845270","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-bea800.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-bea800/rate-test-model-bea800\",\"requestedSubscription\":\"e2e-rate-iso-a-3d9d9b\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-14T16:07:38Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f98cc059-1f19-4d91-b70d-2c8054845270","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bea800.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-bea800","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3d9d9b","namespace":"ai-tenant-e2e-shared-a-bea800","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-14T16:07:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f98cc059-1f19-4d91-b70d-2c8054845270","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T16:07:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f98cc059-1f19-4d91-b70d-2c8054845270","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T16:07:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f98cc059-1f19-4d91-b70d-2c8054845270","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T16:07:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f98cc059-1f19-4d91-b70d-2c8054845270","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bea800/rate-test-model-bea800\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-bea800/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T16:07:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f98cc059-1f19-4d91-b70d-2c8054845270","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T16:07:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f98cc059-1f19-4d91-b70d-2c8054845270","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T16:07:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f98cc059-1f19-4d91-b70d-2c8054845270","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-3d9d9b"} {"level":"debug","ts":"2026-07-14T16:07:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f98cc059-1f19-4d91-b70d-2c8054845270","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T16:07:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f98cc059-1f19-4d91-b70d-2c8054845270","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"ec63b563-f4d0-453a-aece-a5c6c6da9c70","keyName":"e2e-rate-a-3d9d9b","selected_subscription":"e2e-rate-iso-a-3d9d9b","selected_subscription_key":"ai-tenant-e2e-shared-a-bea800/e2e-rate-iso-a-3d9d9b@ai-tenant-e2e-shared-a-bea800/rate-test-model-bea800","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-bea800","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3d9d9b","namespace":"ai-tenant-e2e-shared-a-bea800","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-14T16:07:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f98cc059-1f19-4d91-b70d-2c8054845270","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T16:07:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f98cc059-1f19-4d91-b70d-2c8054845270","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T16:07:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f42c52a4-a33a-4a44-8fed-72b0b471848c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:39234","PortSpecifier":{"PortValue":39234}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f42c52a4-a33a-4a44-8fed-72b0b471848c","method":"POST","path":"/ai-tenant-e2e-shared-a-bea800/rate-test-model-bea800/v1/completions","host":"e2e-shared-a-bea800.apps.bef11670-107b-4509-941d-05c0a92404fb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T16:07:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f42c52a4-a33a-4a44-8fed-72b0b471848c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:39234","PortSpecifier":{"PortValue":39234}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784045259,"nanos":633814596},"http":{"id":"f42c52a4-a33a-4a44-8fed-72b0b471848c","method":"POST","headers":{":authority":"e2e-shared-a-bea800.apps.bef11670-107b-4509-941d-05c0a92404fb.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-bea800/rate-test-model-bea800/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T16:07:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f42c52a4-a33a-4a44-8fed-72b0b471848c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1GFQXcuNO7JbAPrCs_jRd2lBmlzkOK4RjNzeBYt4P9EIqeQht4922FAvHwq5"} {"level":"debug","ts":"2026-07-14T16:07:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f42c52a4-a33a-4a44-8fed-72b0b471848c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-bea800.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1GFQXcuNO7JbAPrCs_jRd2lBmlzkOK4RjNzeBYt4P9EIqeQht4922FAvHwq5\"}"} {"level":"debug","ts":"2026-07-14T16:07:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f42c52a4-a33a-4a44-8fed-72b0b471848c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bea800.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ec63b563-f4d0-453a-aece-a5c6c6da9c70","keyName":"e2e-rate-a-3d9d9b","subscription":"e2e-rate-iso-a-3d9d9b","tenant":"e2e-shared-a-bea800","userId":"ec63b563-f4d0-453a-aece-a5c6c6da9c70","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T16:07:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f42c52a4-a33a-4a44-8fed-72b0b471848c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-bea800.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-bea800/rate-test-model-bea800\",\"requestedSubscription\":\"e2e-rate-iso-a-3d9d9b\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-14T16:07:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f42c52a4-a33a-4a44-8fed-72b0b471848c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bea800.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-bea800","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3d9d9b","namespace":"ai-tenant-e2e-shared-a-bea800","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-14T16:07:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f42c52a4-a33a-4a44-8fed-72b0b471848c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T16:07:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f42c52a4-a33a-4a44-8fed-72b0b471848c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T16:07:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f42c52a4-a33a-4a44-8fed-72b0b471848c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T16:07:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f42c52a4-a33a-4a44-8fed-72b0b471848c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bea800/rate-test-model-bea800\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-bea800/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T16:07:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f42c52a4-a33a-4a44-8fed-72b0b471848c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T16:07:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f42c52a4-a33a-4a44-8fed-72b0b471848c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T16:07:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f42c52a4-a33a-4a44-8fed-72b0b471848c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T16:07:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f42c52a4-a33a-4a44-8fed-72b0b471848c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-3d9d9b"} {"level":"debug","ts":"2026-07-14T16:07:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f42c52a4-a33a-4a44-8fed-72b0b471848c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"ec63b563-f4d0-453a-aece-a5c6c6da9c70","keyName":"e2e-rate-a-3d9d9b","selected_subscription":"e2e-rate-iso-a-3d9d9b","selected_subscription_key":"ai-tenant-e2e-shared-a-bea800/e2e-rate-iso-a-3d9d9b@ai-tenant-e2e-shared-a-bea800/rate-test-model-bea800","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-bea800","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3d9d9b","namespace":"ai-tenant-e2e-shared-a-bea800","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-14T16:07:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f42c52a4-a33a-4a44-8fed-72b0b471848c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T16:07:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f42c52a4-a33a-4a44-8fed-72b0b471848c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T16:07:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dd0655d5-0ae6-4dcf-ab96-f645f23c23a1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:60942","PortSpecifier":{"PortValue":60942}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.78:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"dd0655d5-0ae6-4dcf-ab96-f645f23c23a1","method":"POST","path":"/ai-tenant-e2e-shared-b-519447/rate-test-model-519447/v1/completions","host":"e2e-shared-b-519447.apps.bef11670-107b-4509-941d-05c0a92404fb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T16:07:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dd0655d5-0ae6-4dcf-ab96-f645f23c23a1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:60942","PortSpecifier":{"PortValue":60942}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.78:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784045259,"nanos":672388503},"http":{"id":"dd0655d5-0ae6-4dcf-ab96-f645f23c23a1","method":"POST","headers":{":authority":"e2e-shared-b-519447.apps.bef11670-107b-4509-941d-05c0a92404fb.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-519447/rate-test-model-519447/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T16:07:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"dd0655d5-0ae6-4dcf-ab96-f645f23c23a1","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-161VwaXzA6Wvx9x3X_SMosdnRIBpoQAECVzUv22nvsvH48dmXpAda9M6MNCgM"} {"level":"debug","ts":"2026-07-14T16:07:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"dd0655d5-0ae6-4dcf-ab96-f645f23c23a1","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-519447.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-161VwaXzA6Wvx9x3X_SMosdnRIBpoQAECVzUv22nvsvH48dmXpAda9M6MNCgM\"}"} {"level":"debug","ts":"2026-07-14T16:07:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"dd0655d5-0ae6-4dcf-ab96-f645f23c23a1","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-519447.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1cbd8fe9-dcd9-4894-b553-e0f44f182f26","keyName":"e2e-rate-b-3d9d9b","subscription":"e2e-rate-iso-b-3d9d9b","tenant":"e2e-shared-b-519447","userId":"1cbd8fe9-dcd9-4894-b553-e0f44f182f26","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T16:07:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"dd0655d5-0ae6-4dcf-ab96-f645f23c23a1","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-519447.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-519447/rate-test-model-519447\",\"requestedSubscription\":\"e2e-rate-iso-b-3d9d9b\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-14T16:07:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"dd0655d5-0ae6-4dcf-ab96-f645f23c23a1","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-519447.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-519447","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-3d9d9b","namespace":"ai-tenant-e2e-shared-b-519447","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-14T16:07:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"dd0655d5-0ae6-4dcf-ab96-f645f23c23a1","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T16:07:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dd0655d5-0ae6-4dcf-ab96-f645f23c23a1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T16:07:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dd0655d5-0ae6-4dcf-ab96-f645f23c23a1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T16:07:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dd0655d5-0ae6-4dcf-ab96-f645f23c23a1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-519447/rate-test-model-519447\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-519447/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T16:07:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dd0655d5-0ae6-4dcf-ab96-f645f23c23a1","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T16:07:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dd0655d5-0ae6-4dcf-ab96-f645f23c23a1","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T16:07:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dd0655d5-0ae6-4dcf-ab96-f645f23c23a1","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-3d9d9b"} {"level":"debug","ts":"2026-07-14T16:07:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dd0655d5-0ae6-4dcf-ab96-f645f23c23a1","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T16:07:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dd0655d5-0ae6-4dcf-ab96-f645f23c23a1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"1cbd8fe9-dcd9-4894-b553-e0f44f182f26","keyName":"e2e-rate-b-3d9d9b","selected_subscription":"e2e-rate-iso-b-3d9d9b","selected_subscription_key":"ai-tenant-e2e-shared-b-519447/e2e-rate-iso-b-3d9d9b@ai-tenant-e2e-shared-b-519447/rate-test-model-519447","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-519447","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-3d9d9b","namespace":"ai-tenant-e2e-shared-b-519447","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-14T16:07:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dd0655d5-0ae6-4dcf-ab96-f645f23c23a1","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T16:07:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dd0655d5-0ae6-4dcf-ab96-f645f23c23a1","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T16:07:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f48db350da2042b132c764b885f99e314c51bb77addcc64947387e95d230dee9"} {"level":"info","ts":"2026-07-14T16:07:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/95f26a37dce6f0d8628fdec3adbd2d0c59e10b83f2268a2fef379518f5986ab1"} {"level":"info","ts":"2026-07-14T16:07:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f893f393c9aa43af01bbad1a129132b94c117d59114724eda74ef31ae6ce22bb"} {"level":"info","ts":"2026-07-14T16:07:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d4ca517fa4d820b89f8881d0634f720636d7bb68f4b68cc629679f91fd863d1f"} {"level":"info","ts":"2026-07-14T16:07:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9afee5893a3b1041a26808314ce9cfffe682396fdf9eef59ef402839e25ecc34"} {"level":"info","ts":"2026-07-14T16:07:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e443cf22db2f76e4552c0713ca704cb6c52233cd136bce913280ea464befbd85"} {"level":"info","ts":"2026-07-14T16:07:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/faa879c4b4e334223c1dd469f04e9192a422ec1a70b1c53800e23afb6eb06e58"} {"level":"info","ts":"2026-07-14T16:07:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b657f31bbbe946923747ef8b02fc76431319161dd75972e9c165a566a0044818"} {"level":"info","ts":"2026-07-14T16:07:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/08c716f376269ee13189abce2fa2a60d1f1f8d629c7fede921191d5b8bc6e4b7"} {"level":"info","ts":"2026-07-14T16:07:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5a60eb64576bebc52a3e19344029d35bf5d546e32d1fa5673546e8be3dccbd3c"} {"level":"info","ts":"2026-07-14T16:07:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d78045e31bb96dfddc6812b999afcd4b2098b84b728fb6750be4998291ca1ff1"} {"level":"info","ts":"2026-07-14T16:07:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/42f7b71fbc888ff7afea71121ea26f2ad80e45f3a0554f0090f6065a1ada1852"} {"level":"info","ts":"2026-07-14T16:07:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d5b05ed6e07911d55921760ef3be7ea311041109200e71fc48f426a333425088"} {"level":"info","ts":"2026-07-14T16:07:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c84349e322ffbfbc8de20fd8b935d1f6a5c90b439b02ba0006c93308931f62f0"} {"level":"info","ts":"2026-07-14T16:07:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eca739f7599a631ecaa0ecbaf54ddde56b7ff90cfc81d947110b067517ac0abd"} {"level":"info","ts":"2026-07-14T16:07:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/242a19b867cab4dc090aa64de46141ac923a47039f019060097f6167f5a34e7e"} {"level":"info","ts":"2026-07-14T16:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/78cf544cc3af549b4d067d80bf3c4b030553ca9b28afeef15b07706627b15925"} {"level":"info","ts":"2026-07-14T16:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2c2bb13c2dd3e1c51a69db9c88375f062d67de98a5ead5f01c5d00c0dab0c3c7"} {"level":"info","ts":"2026-07-14T16:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dc57175700ab457fddd972f579c87c640cdf2a48ca10c986490fc4e1ac1e4c7f"} {"level":"info","ts":"2026-07-14T16:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ed2d4dd5e02d2c7ac430be91b5fb2c98203725f80eeecfc6f84759433294adac"} {"level":"info","ts":"2026-07-14T16:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1cb3f5c2cd104fc41b94f1d210a08a6fa6f77c059b984284017bd5e7ddc72e64"} {"level":"info","ts":"2026-07-14T16:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b4a5a13d791e74d1fbd26c2b91798157ecaa2ebe9cb36c836e3b1b3ce2ec78fe"} {"level":"info","ts":"2026-07-14T16:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b6c67852148f3fcef75b97609a07066824f31bdfbcd51e77443505bffffaa853"} {"level":"info","ts":"2026-07-14T16:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/adb742abf62e24188ca13a4a0042ad0643b3f82c2828972e60f568a47d164d1a"}