--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) --- {"level":"info","ts":"2026-07-13T21:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa0d61075b58f94ee2d8a5544d205372bbe467230ee082988ab33b9776900148","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa0d61075b58f94ee2d8a5544d205372bbe467230ee082988ab33b9776900148","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e37d3b70e1b43413e0ceed39aae3ba1073c1fddd883b403a710430c4660fe31","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:48:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:48:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e37d3b70e1b43413e0ceed39aae3ba1073c1fddd883b403a710430c4660fe31","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e37d3b70e1b43413e0ceed39aae3ba1073c1fddd883b403a710430c4660fe31","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e37d3b70e1b43413e0ceed39aae3ba1073c1fddd883b403a710430c4660fe31","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa0d61075b58f94ee2d8a5544d205372bbe467230ee082988ab33b9776900148"} {"level":"debug","ts":"2026-07-13T21:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e37d3b70e1b43413e0ceed39aae3ba1073c1fddd883b403a710430c4660fe31","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:48:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:48:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e37d3b70e1b43413e0ceed39aae3ba1073c1fddd883b403a710430c4660fe31"} {"level":"info","ts":"2026-07-13T21:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e37d3b70e1b43413e0ceed39aae3ba1073c1fddd883b403a710430c4660fe31","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e37d3b70e1b43413e0ceed39aae3ba1073c1fddd883b403a710430c4660fe31","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:48:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:48:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0e37d3b70e1b43413e0ceed39aae3ba1073c1fddd883b403a710430c4660fe31"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e37d3b70e1b43413e0ceed39aae3ba1073c1fddd883b403a710430c4660fe31","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e37d3b70e1b43413e0ceed39aae3ba1073c1fddd883b403a710430c4660fe31","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:48:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:48:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e37d3b70e1b43413e0ceed39aae3ba1073c1fddd883b403a710430c4660fe31"} {"level":"info","ts":"2026-07-13T21:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e37d3b70e1b43413e0ceed39aae3ba1073c1fddd883b403a710430c4660fe31","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e37d3b70e1b43413e0ceed39aae3ba1073c1fddd883b403a710430c4660fe31","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e37d3b70e1b43413e0ceed39aae3ba1073c1fddd883b403a710430c4660fe31","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e37d3b70e1b43413e0ceed39aae3ba1073c1fddd883b403a710430c4660fe31"} {"level":"debug","ts":"2026-07-13T21:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e55072b7e87a57d9f8d9b64c93caaaa78c316a092caa9bf2cdf0e95bcb88907","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:48:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:48:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e55072b7e87a57d9f8d9b64c93caaaa78c316a092caa9bf2cdf0e95bcb88907","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e37d3b70e1b43413e0ceed39aae3ba1073c1fddd883b403a710430c4660fe31","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e55072b7e87a57d9f8d9b64c93caaaa78c316a092caa9bf2cdf0e95bcb88907","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e37d3b70e1b43413e0ceed39aae3ba1073c1fddd883b403a710430c4660fe31"} {"level":"debug","ts":"2026-07-13T21:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e55072b7e87a57d9f8d9b64c93caaaa78c316a092caa9bf2cdf0e95bcb88907","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:48:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:48:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e55072b7e87a57d9f8d9b64c93caaaa78c316a092caa9bf2cdf0e95bcb88907","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e55072b7e87a57d9f8d9b64c93caaaa78c316a092caa9bf2cdf0e95bcb88907","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e55072b7e87a57d9f8d9b64c93caaaa78c316a092caa9bf2cdf0e95bcb88907"} {"level":"debug","ts":"2026-07-13T21:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e55072b7e87a57d9f8d9b64c93caaaa78c316a092caa9bf2cdf0e95bcb88907","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e37d3b70e1b43413e0ceed39aae3ba1073c1fddd883b403a710430c4660fe31","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:48:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:48:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0e37d3b70e1b43413e0ceed39aae3ba1073c1fddd883b403a710430c4660fe31"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e55072b7e87a57d9f8d9b64c93caaaa78c316a092caa9bf2cdf0e95bcb88907"} {"level":"info","ts":"2026-07-13T21:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e37d3b70e1b43413e0ceed39aae3ba1073c1fddd883b403a710430c4660fe31","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e37d3b70e1b43413e0ceed39aae3ba1073c1fddd883b403a710430c4660fe31","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:48:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:48:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e37d3b70e1b43413e0ceed39aae3ba1073c1fddd883b403a710430c4660fe31","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e37d3b70e1b43413e0ceed39aae3ba1073c1fddd883b403a710430c4660fe31","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e37d3b70e1b43413e0ceed39aae3ba1073c1fddd883b403a710430c4660fe31","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e37d3b70e1b43413e0ceed39aae3ba1073c1fddd883b403a710430c4660fe31"} {"level":"debug","ts":"2026-07-13T21:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e37d3b70e1b43413e0ceed39aae3ba1073c1fddd883b403a710430c4660fe31","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e37d3b70e1b43413e0ceed39aae3ba1073c1fddd883b403a710430c4660fe31"} {"level":"debug","ts":"2026-07-13T21:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e55072b7e87a57d9f8d9b64c93caaaa78c316a092caa9bf2cdf0e95bcb88907","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:48:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:48:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5e55072b7e87a57d9f8d9b64c93caaaa78c316a092caa9bf2cdf0e95bcb88907"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e55072b7e87a57d9f8d9b64c93caaaa78c316a092caa9bf2cdf0e95bcb88907","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e37d3b70e1b43413e0ceed39aae3ba1073c1fddd883b403a710430c4660fe31","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:48:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:48:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0e37d3b70e1b43413e0ceed39aae3ba1073c1fddd883b403a710430c4660fe31"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e37d3b70e1b43413e0ceed39aae3ba1073c1fddd883b403a710430c4660fe31","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e55072b7e87a57d9f8d9b64c93caaaa78c316a092caa9bf2cdf0e95bcb88907","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:48:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:48:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e55072b7e87a57d9f8d9b64c93caaaa78c316a092caa9bf2cdf0e95bcb88907"} {"level":"info","ts":"2026-07-13T21:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e55072b7e87a57d9f8d9b64c93caaaa78c316a092caa9bf2cdf0e95bcb88907","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e37d3b70e1b43413e0ceed39aae3ba1073c1fddd883b403a710430c4660fe31","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:48:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:48:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e37d3b70e1b43413e0ceed39aae3ba1073c1fddd883b403a710430c4660fe31","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e55072b7e87a57d9f8d9b64c93caaaa78c316a092caa9bf2cdf0e95bcb88907","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:48:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:48:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5e55072b7e87a57d9f8d9b64c93caaaa78c316a092caa9bf2cdf0e95bcb88907"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e37d3b70e1b43413e0ceed39aae3ba1073c1fddd883b403a710430c4660fe31"} {"level":"info","ts":"2026-07-13T21:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e55072b7e87a57d9f8d9b64c93caaaa78c316a092caa9bf2cdf0e95bcb88907","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e37d3b70e1b43413e0ceed39aae3ba1073c1fddd883b403a710430c4660fe31","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:48:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:48:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0e37d3b70e1b43413e0ceed39aae3ba1073c1fddd883b403a710430c4660fe31"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e55072b7e87a57d9f8d9b64c93caaaa78c316a092caa9bf2cdf0e95bcb88907"} {"level":"info","ts":"2026-07-13T21:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e37d3b70e1b43413e0ceed39aae3ba1073c1fddd883b403a710430c4660fe31","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e55072b7e87a57d9f8d9b64c93caaaa78c316a092caa9bf2cdf0e95bcb88907","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e37d3b70e1b43413e0ceed39aae3ba1073c1fddd883b403a710430c4660fe31","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:48:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:48:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e37d3b70e1b43413e0ceed39aae3ba1073c1fddd883b403a710430c4660fe31","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e37d3b70e1b43413e0ceed39aae3ba1073c1fddd883b403a710430c4660fe31","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e37d3b70e1b43413e0ceed39aae3ba1073c1fddd883b403a710430c4660fe31","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e37d3b70e1b43413e0ceed39aae3ba1073c1fddd883b403a710430c4660fe31"} {"level":"debug","ts":"2026-07-13T21:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e37d3b70e1b43413e0ceed39aae3ba1073c1fddd883b403a710430c4660fe31","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:48:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:48:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0e37d3b70e1b43413e0ceed39aae3ba1073c1fddd883b403a710430c4660fe31"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e55072b7e87a57d9f8d9b64c93caaaa78c316a092caa9bf2cdf0e95bcb88907"} {"level":"info","ts":"2026-07-13T21:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e37d3b70e1b43413e0ceed39aae3ba1073c1fddd883b403a710430c4660fe31","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e37d3b70e1b43413e0ceed39aae3ba1073c1fddd883b403a710430c4660fe31","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:48:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:48:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e37d3b70e1b43413e0ceed39aae3ba1073c1fddd883b403a710430c4660fe31"} {"level":"info","ts":"2026-07-13T21:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e37d3b70e1b43413e0ceed39aae3ba1073c1fddd883b403a710430c4660fe31","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e37d3b70e1b43413e0ceed39aae3ba1073c1fddd883b403a710430c4660fe31","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e37d3b70e1b43413e0ceed39aae3ba1073c1fddd883b403a710430c4660fe31","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e37d3b70e1b43413e0ceed39aae3ba1073c1fddd883b403a710430c4660fe31"} {"level":"debug","ts":"2026-07-13T21:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e37d3b70e1b43413e0ceed39aae3ba1073c1fddd883b403a710430c4660fe31","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e37d3b70e1b43413e0ceed39aae3ba1073c1fddd883b403a710430c4660fe31"} {"level":"debug","ts":"2026-07-13T21:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e37d3b70e1b43413e0ceed39aae3ba1073c1fddd883b403a710430c4660fe31","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:48:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:48:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0e37d3b70e1b43413e0ceed39aae3ba1073c1fddd883b403a710430c4660fe31"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e37d3b70e1b43413e0ceed39aae3ba1073c1fddd883b403a710430c4660fe31","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e37d3b70e1b43413e0ceed39aae3ba1073c1fddd883b403a710430c4660fe31","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:48:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:48:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e37d3b70e1b43413e0ceed39aae3ba1073c1fddd883b403a710430c4660fe31","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e37d3b70e1b43413e0ceed39aae3ba1073c1fddd883b403a710430c4660fe31","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e37d3b70e1b43413e0ceed39aae3ba1073c1fddd883b403a710430c4660fe31","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e37d3b70e1b43413e0ceed39aae3ba1073c1fddd883b403a710430c4660fe31"} {"level":"debug","ts":"2026-07-13T21:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e37d3b70e1b43413e0ceed39aae3ba1073c1fddd883b403a710430c4660fe31","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e37d3b70e1b43413e0ceed39aae3ba1073c1fddd883b403a710430c4660fe31"} {"level":"debug","ts":"2026-07-13T21:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e37d3b70e1b43413e0ceed39aae3ba1073c1fddd883b403a710430c4660fe31","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:48:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:48:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0e37d3b70e1b43413e0ceed39aae3ba1073c1fddd883b403a710430c4660fe31"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e37d3b70e1b43413e0ceed39aae3ba1073c1fddd883b403a710430c4660fe31","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e37d3b70e1b43413e0ceed39aae3ba1073c1fddd883b403a710430c4660fe31","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:48:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:48:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e37d3b70e1b43413e0ceed39aae3ba1073c1fddd883b403a710430c4660fe31","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e37d3b70e1b43413e0ceed39aae3ba1073c1fddd883b403a710430c4660fe31","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e37d3b70e1b43413e0ceed39aae3ba1073c1fddd883b403a710430c4660fe31","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e37d3b70e1b43413e0ceed39aae3ba1073c1fddd883b403a710430c4660fe31"} {"level":"debug","ts":"2026-07-13T21:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e37d3b70e1b43413e0ceed39aae3ba1073c1fddd883b403a710430c4660fe31","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e37d3b70e1b43413e0ceed39aae3ba1073c1fddd883b403a710430c4660fe31"} {"level":"debug","ts":"2026-07-13T21:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e37d3b70e1b43413e0ceed39aae3ba1073c1fddd883b403a710430c4660fe31","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:48:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:48:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0e37d3b70e1b43413e0ceed39aae3ba1073c1fddd883b403a710430c4660fe31"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e37d3b70e1b43413e0ceed39aae3ba1073c1fddd883b403a710430c4660fe31","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e37d3b70e1b43413e0ceed39aae3ba1073c1fddd883b403a710430c4660fe31","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:48:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:48:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e37d3b70e1b43413e0ceed39aae3ba1073c1fddd883b403a710430c4660fe31","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e37d3b70e1b43413e0ceed39aae3ba1073c1fddd883b403a710430c4660fe31","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e37d3b70e1b43413e0ceed39aae3ba1073c1fddd883b403a710430c4660fe31","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e37d3b70e1b43413e0ceed39aae3ba1073c1fddd883b403a710430c4660fe31"} {"level":"debug","ts":"2026-07-13T21:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e37d3b70e1b43413e0ceed39aae3ba1073c1fddd883b403a710430c4660fe31","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e37d3b70e1b43413e0ceed39aae3ba1073c1fddd883b403a710430c4660fe31"} {"level":"debug","ts":"2026-07-13T21:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e37d3b70e1b43413e0ceed39aae3ba1073c1fddd883b403a710430c4660fe31","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:48:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:48:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0e37d3b70e1b43413e0ceed39aae3ba1073c1fddd883b403a710430c4660fe31"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e37d3b70e1b43413e0ceed39aae3ba1073c1fddd883b403a710430c4660fe31","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e37d3b70e1b43413e0ceed39aae3ba1073c1fddd883b403a710430c4660fe31","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:48:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:48:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e37d3b70e1b43413e0ceed39aae3ba1073c1fddd883b403a710430c4660fe31"} {"level":"info","ts":"2026-07-13T21:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e37d3b70e1b43413e0ceed39aae3ba1073c1fddd883b403a710430c4660fe31","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e37d3b70e1b43413e0ceed39aae3ba1073c1fddd883b403a710430c4660fe31","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:48:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:48:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0e37d3b70e1b43413e0ceed39aae3ba1073c1fddd883b403a710430c4660fe31"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e37d3b70e1b43413e0ceed39aae3ba1073c1fddd883b403a710430c4660fe31"} {"level":"info","ts":"2026-07-13T21:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e37d3b70e1b43413e0ceed39aae3ba1073c1fddd883b403a710430c4660fe31","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e37d3b70e1b43413e0ceed39aae3ba1073c1fddd883b403a710430c4660fe31","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:48:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:48:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0e37d3b70e1b43413e0ceed39aae3ba1073c1fddd883b403a710430c4660fe31"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-13T21:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0e37d3b70e1b43413e0ceed39aae3ba1073c1fddd883b403a710430c4660fe31","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0e37d3b70e1b43413e0ceed39aae3ba1073c1fddd883b403a710430c4660fe31\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-13T21:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e37d3b70e1b43413e0ceed39aae3ba1073c1fddd883b403a710430c4660fe31","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:48:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:48:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e37d3b70e1b43413e0ceed39aae3ba1073c1fddd883b403a710430c4660fe31"} {"level":"info","ts":"2026-07-13T21:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e37d3b70e1b43413e0ceed39aae3ba1073c1fddd883b403a710430c4660fe31","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e37d3b70e1b43413e0ceed39aae3ba1073c1fddd883b403a710430c4660fe31","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e37d3b70e1b43413e0ceed39aae3ba1073c1fddd883b403a710430c4660fe31","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e37d3b70e1b43413e0ceed39aae3ba1073c1fddd883b403a710430c4660fe31","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e37d3b70e1b43413e0ceed39aae3ba1073c1fddd883b403a710430c4660fe31","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e37d3b70e1b43413e0ceed39aae3ba1073c1fddd883b403a710430c4660fe31"} {"level":"debug","ts":"2026-07-13T21:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e37d3b70e1b43413e0ceed39aae3ba1073c1fddd883b403a710430c4660fe31","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:48:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:48:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0e37d3b70e1b43413e0ceed39aae3ba1073c1fddd883b403a710430c4660fe31"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e37d3b70e1b43413e0ceed39aae3ba1073c1fddd883b403a710430c4660fe31","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e37d3b70e1b43413e0ceed39aae3ba1073c1fddd883b403a710430c4660fe31","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e37d3b70e1b43413e0ceed39aae3ba1073c1fddd883b403a710430c4660fe31"} {"level":"info","ts":"2026-07-13T21:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/93b4f2de9520c7535e19f0ae905236e902cb3bc55338526b5fb26fafa6ff6d94"} {"level":"info","ts":"2026-07-13T21:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4952f1cf0040567ccd66ded4dcec6f62d6d1a88cac76b9d35bbc8664f0214e82"} {"level":"info","ts":"2026-07-13T21:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/22cfbc32e77a117967a1445ed486486c869324ed8abc7b137845fe643c8c69d1"} {"level":"info","ts":"2026-07-13T21:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/03e5e05cfb65c256a3b52df113946716880cbec1d31d0ae424a16ad069b0e6be"} {"level":"info","ts":"2026-07-13T21:49:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e33ec01e9b6c86b4a35ff3e8560241842243e81dd292d5f01e3fb83005c7aa11"} {"level":"info","ts":"2026-07-13T21:49:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fa0d61075b58f94ee2d8a5544d205372bbe467230ee082988ab33b9776900148"} {"level":"info","ts":"2026-07-13T21:49:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0e37d3b70e1b43413e0ceed39aae3ba1073c1fddd883b403a710430c4660fe31"} {"level":"info","ts":"2026-07-13T21:49:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5e55072b7e87a57d9f8d9b64c93caaaa78c316a092caa9bf2cdf0e95bcb88907"} {"level":"debug","ts":"2026-07-13T21:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"347d16811a3d165a7a404ac6723ca8ba73ef2c4756d6fb5e070867a32504d765","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:50:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:50:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"347d16811a3d165a7a404ac6723ca8ba73ef2c4756d6fb5e070867a32504d765","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"347d16811a3d165a7a404ac6723ca8ba73ef2c4756d6fb5e070867a32504d765","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:50:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:50:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/347d16811a3d165a7a404ac6723ca8ba73ef2c4756d6fb5e070867a32504d765"} {"level":"info","ts":"2026-07-13T21:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"347d16811a3d165a7a404ac6723ca8ba73ef2c4756d6fb5e070867a32504d765","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"347d16811a3d165a7a404ac6723ca8ba73ef2c4756d6fb5e070867a32504d765","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:50:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:50:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-13T21:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"347d16811a3d165a7a404ac6723ca8ba73ef2c4756d6fb5e070867a32504d765","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"347d16811a3d165a7a404ac6723ca8ba73ef2c4756d6fb5e070867a32504d765\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-13T21:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"347d16811a3d165a7a404ac6723ca8ba73ef2c4756d6fb5e070867a32504d765","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"347d16811a3d165a7a404ac6723ca8ba73ef2c4756d6fb5e070867a32504d765","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/347d16811a3d165a7a404ac6723ca8ba73ef2c4756d6fb5e070867a32504d765"} {"level":"info","ts":"2026-07-13T21:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/347d16811a3d165a7a404ac6723ca8ba73ef2c4756d6fb5e070867a32504d765"} {"level":"debug","ts":"2026-07-13T21:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b19302e3db6a54345decbcb64219e999378e81eaac4ab90f6f63fd090ec62ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:50:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:50:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b19302e3db6a54345decbcb64219e999378e81eaac4ab90f6f63fd090ec62ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b19302e3db6a54345decbcb64219e999378e81eaac4ab90f6f63fd090ec62ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"347d16811a3d165a7a404ac6723ca8ba73ef2c4756d6fb5e070867a32504d765","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:50:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:50:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["347d16811a3d165a7a404ac6723ca8ba73ef2c4756d6fb5e070867a32504d765"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b19302e3db6a54345decbcb64219e999378e81eaac4ab90f6f63fd090ec62ac"} {"level":"info","ts":"2026-07-13T21:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"347d16811a3d165a7a404ac6723ca8ba73ef2c4756d6fb5e070867a32504d765","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b19302e3db6a54345decbcb64219e999378e81eaac4ab90f6f63fd090ec62ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"347d16811a3d165a7a404ac6723ca8ba73ef2c4756d6fb5e070867a32504d765","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b19302e3db6a54345decbcb64219e999378e81eaac4ab90f6f63fd090ec62ac"} {"level":"debug","ts":"2026-07-13T21:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b19302e3db6a54345decbcb64219e999378e81eaac4ab90f6f63fd090ec62ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:50:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:50:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5b19302e3db6a54345decbcb64219e999378e81eaac4ab90f6f63fd090ec62ac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b19302e3db6a54345decbcb64219e999378e81eaac4ab90f6f63fd090ec62ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b19302e3db6a54345decbcb64219e999378e81eaac4ab90f6f63fd090ec62ac","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/347d16811a3d165a7a404ac6723ca8ba73ef2c4756d6fb5e070867a32504d765"} {"level":"info","ts":"2026-07-13T21:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b19302e3db6a54345decbcb64219e999378e81eaac4ab90f6f63fd090ec62ac"} {"level":"debug","ts":"2026-07-13T21:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"92031e00503eab985361a7834e60e5df4057e3f88328ee011021bd39dfd2cc0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:50:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:50:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"92031e00503eab985361a7834e60e5df4057e3f88328ee011021bd39dfd2cc0e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"92031e00503eab985361a7834e60e5df4057e3f88328ee011021bd39dfd2cc0e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"92031e00503eab985361a7834e60e5df4057e3f88328ee011021bd39dfd2cc0e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/92031e00503eab985361a7834e60e5df4057e3f88328ee011021bd39dfd2cc0e"} {"level":"debug","ts":"2026-07-13T21:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"92031e00503eab985361a7834e60e5df4057e3f88328ee011021bd39dfd2cc0e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/92031e00503eab985361a7834e60e5df4057e3f88328ee011021bd39dfd2cc0e"} {"level":"debug","ts":"2026-07-13T21:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"92031e00503eab985361a7834e60e5df4057e3f88328ee011021bd39dfd2cc0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:50:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:50:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["92031e00503eab985361a7834e60e5df4057e3f88328ee011021bd39dfd2cc0e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"92031e00503eab985361a7834e60e5df4057e3f88328ee011021bd39dfd2cc0e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b20bae1e4bd781d8950d5e72217c4e558adf27bdf23f993f25b5c17e51a311b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:50:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:50:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b20bae1e4bd781d8950d5e72217c4e558adf27bdf23f993f25b5c17e51a311b3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"92031e00503eab985361a7834e60e5df4057e3f88328ee011021bd39dfd2cc0e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b20bae1e4bd781d8950d5e72217c4e558adf27bdf23f993f25b5c17e51a311b3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b20bae1e4bd781d8950d5e72217c4e558adf27bdf23f993f25b5c17e51a311b3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b20bae1e4bd781d8950d5e72217c4e558adf27bdf23f993f25b5c17e51a311b3"} {"level":"debug","ts":"2026-07-13T21:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b20bae1e4bd781d8950d5e72217c4e558adf27bdf23f993f25b5c17e51a311b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:50:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:50:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b20bae1e4bd781d8950d5e72217c4e558adf27bdf23f993f25b5c17e51a311b3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/92031e00503eab985361a7834e60e5df4057e3f88328ee011021bd39dfd2cc0e"} {"level":"info","ts":"2026-07-13T21:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b20bae1e4bd781d8950d5e72217c4e558adf27bdf23f993f25b5c17e51a311b3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b20bae1e4bd781d8950d5e72217c4e558adf27bdf23f993f25b5c17e51a311b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:50:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:50:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b20bae1e4bd781d8950d5e72217c4e558adf27bdf23f993f25b5c17e51a311b3"} {"level":"info","ts":"2026-07-13T21:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b20bae1e4bd781d8950d5e72217c4e558adf27bdf23f993f25b5c17e51a311b3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b20bae1e4bd781d8950d5e72217c4e558adf27bdf23f993f25b5c17e51a311b3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b20bae1e4bd781d8950d5e72217c4e558adf27bdf23f993f25b5c17e51a311b3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b20bae1e4bd781d8950d5e72217c4e558adf27bdf23f993f25b5c17e51a311b3"} {"level":"debug","ts":"2026-07-13T21:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b20bae1e4bd781d8950d5e72217c4e558adf27bdf23f993f25b5c17e51a311b3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"407be41904019b18b50107a0a97b06c04b484a47240e0d114cc0dd8717c86ffd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:50:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:50:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b20bae1e4bd781d8950d5e72217c4e558adf27bdf23f993f25b5c17e51a311b3"} {"level":"info","ts":"2026-07-13T21:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"407be41904019b18b50107a0a97b06c04b484a47240e0d114cc0dd8717c86ffd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"407be41904019b18b50107a0a97b06c04b484a47240e0d114cc0dd8717c86ffd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:50:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:50:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"407be41904019b18b50107a0a97b06c04b484a47240e0d114cc0dd8717c86ffd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"407be41904019b18b50107a0a97b06c04b484a47240e0d114cc0dd8717c86ffd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:50:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:50:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/407be41904019b18b50107a0a97b06c04b484a47240e0d114cc0dd8717c86ffd"} {"level":"error","ts":"2026-07-13T21:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"407be41904019b18b50107a0a97b06c04b484a47240e0d114cc0dd8717c86ffd","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"407be41904019b18b50107a0a97b06c04b484a47240e0d114cc0dd8717c86ffd\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-13T21:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"407be41904019b18b50107a0a97b06c04b484a47240e0d114cc0dd8717c86ffd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"407be41904019b18b50107a0a97b06c04b484a47240e0d114cc0dd8717c86ffd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b20bae1e4bd781d8950d5e72217c4e558adf27bdf23f993f25b5c17e51a311b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:50:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:50:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b20bae1e4bd781d8950d5e72217c4e558adf27bdf23f993f25b5c17e51a311b3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b20bae1e4bd781d8950d5e72217c4e558adf27bdf23f993f25b5c17e51a311b3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b20bae1e4bd781d8950d5e72217c4e558adf27bdf23f993f25b5c17e51a311b3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/407be41904019b18b50107a0a97b06c04b484a47240e0d114cc0dd8717c86ffd"} {"level":"info","ts":"2026-07-13T21:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b20bae1e4bd781d8950d5e72217c4e558adf27bdf23f993f25b5c17e51a311b3"} {"level":"debug","ts":"2026-07-13T21:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a7bdbd6781653a7f975e294cb740f06ead39562a5d603a71f66539255b682c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:50:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:50:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a7bdbd6781653a7f975e294cb740f06ead39562a5d603a71f66539255b682c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a7bdbd6781653a7f975e294cb740f06ead39562a5d603a71f66539255b682c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a7bdbd6781653a7f975e294cb740f06ead39562a5d603a71f66539255b682c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"407be41904019b18b50107a0a97b06c04b484a47240e0d114cc0dd8717c86ffd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:50:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:50:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["407be41904019b18b50107a0a97b06c04b484a47240e0d114cc0dd8717c86ffd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a7bdbd6781653a7f975e294cb740f06ead39562a5d603a71f66539255b682c8"} {"level":"info","ts":"2026-07-13T21:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"407be41904019b18b50107a0a97b06c04b484a47240e0d114cc0dd8717c86ffd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"407be41904019b18b50107a0a97b06c04b484a47240e0d114cc0dd8717c86ffd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a7bdbd6781653a7f975e294cb740f06ead39562a5d603a71f66539255b682c8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a7bdbd6781653a7f975e294cb740f06ead39562a5d603a71f66539255b682c8"} {"level":"debug","ts":"2026-07-13T21:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a7bdbd6781653a7f975e294cb740f06ead39562a5d603a71f66539255b682c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:50:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:50:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a7bdbd6781653a7f975e294cb740f06ead39562a5d603a71f66539255b682c8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/407be41904019b18b50107a0a97b06c04b484a47240e0d114cc0dd8717c86ffd"} {"level":"info","ts":"2026-07-13T21:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a7bdbd6781653a7f975e294cb740f06ead39562a5d603a71f66539255b682c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a7bdbd6781653a7f975e294cb740f06ead39562a5d603a71f66539255b682c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:50:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:50:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a7bdbd6781653a7f975e294cb740f06ead39562a5d603a71f66539255b682c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b32773bff0f69c5e5c6e43d3bb05642fd82ed21f8d124b9188ff0ec390af6c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:50:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:50:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b32773bff0f69c5e5c6e43d3bb05642fd82ed21f8d124b9188ff0ec390af6c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a7bdbd6781653a7f975e294cb740f06ead39562a5d603a71f66539255b682c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f8370eaa3700267d4882607273cc222798b24adfdd353fae40b812e604f94a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:50:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:50:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a7bdbd6781653a7f975e294cb740f06ead39562a5d603a71f66539255b682c8"} {"level":"info","ts":"2026-07-13T21:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f8370eaa3700267d4882607273cc222798b24adfdd353fae40b812e604f94a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b32773bff0f69c5e5c6e43d3bb05642fd82ed21f8d124b9188ff0ec390af6c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:50:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:50:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b32773bff0f69c5e5c6e43d3bb05642fd82ed21f8d124b9188ff0ec390af6c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a7bdbd6781653a7f975e294cb740f06ead39562a5d603a71f66539255b682c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:50:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:50:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a7bdbd6781653a7f975e294cb740f06ead39562a5d603a71f66539255b682c8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b32773bff0f69c5e5c6e43d3bb05642fd82ed21f8d124b9188ff0ec390af6c3"} {"level":"info","ts":"2026-07-13T21:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a7bdbd6781653a7f975e294cb740f06ead39562a5d603a71f66539255b682c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f8370eaa3700267d4882607273cc222798b24adfdd353fae40b812e604f94a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:50:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:50:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f8370eaa3700267d4882607273cc222798b24adfdd353fae40b812e604f94a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b32773bff0f69c5e5c6e43d3bb05642fd82ed21f8d124b9188ff0ec390af6c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:50:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:50:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6b32773bff0f69c5e5c6e43d3bb05642fd82ed21f8d124b9188ff0ec390af6c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f8370eaa3700267d4882607273cc222798b24adfdd353fae40b812e604f94a5"} {"level":"info","ts":"2026-07-13T21:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b32773bff0f69c5e5c6e43d3bb05642fd82ed21f8d124b9188ff0ec390af6c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a7bdbd6781653a7f975e294cb740f06ead39562a5d603a71f66539255b682c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:50:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:50:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a7bdbd6781653a7f975e294cb740f06ead39562a5d603a71f66539255b682c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f8370eaa3700267d4882607273cc222798b24adfdd353fae40b812e604f94a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:50:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:50:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f8370eaa3700267d4882607273cc222798b24adfdd353fae40b812e604f94a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f8370eaa3700267d4882607273cc222798b24adfdd353fae40b812e604f94a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b32773bff0f69c5e5c6e43d3bb05642fd82ed21f8d124b9188ff0ec390af6c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a7bdbd6781653a7f975e294cb740f06ead39562a5d603a71f66539255b682c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1380d819ef47cbd38344f96b6f94299ab9d515207ef645e8b52d816a8d5ca366","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:50:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:50:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a7bdbd6781653a7f975e294cb740f06ead39562a5d603a71f66539255b682c8"} {"level":"info","ts":"2026-07-13T21:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1380d819ef47cbd38344f96b6f94299ab9d515207ef645e8b52d816a8d5ca366","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f8370eaa3700267d4882607273cc222798b24adfdd353fae40b812e604f94a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a7bdbd6781653a7f975e294cb740f06ead39562a5d603a71f66539255b682c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:50:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:50:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a7bdbd6781653a7f975e294cb740f06ead39562a5d603a71f66539255b682c8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a7bdbd6781653a7f975e294cb740f06ead39562a5d603a71f66539255b682c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1380d819ef47cbd38344f96b6f94299ab9d515207ef645e8b52d816a8d5ca366","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a7bdbd6781653a7f975e294cb740f06ead39562a5d603a71f66539255b682c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1380d819ef47cbd38344f96b6f94299ab9d515207ef645e8b52d816a8d5ca366","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b32773bff0f69c5e5c6e43d3bb05642fd82ed21f8d124b9188ff0ec390af6c3"} {"level":"debug","ts":"2026-07-13T21:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1380d819ef47cbd38344f96b6f94299ab9d515207ef645e8b52d816a8d5ca366","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f8370eaa3700267d4882607273cc222798b24adfdd353fae40b812e604f94a5"} {"level":"info","ts":"2026-07-13T21:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1380d819ef47cbd38344f96b6f94299ab9d515207ef645e8b52d816a8d5ca366"} {"level":"debug","ts":"2026-07-13T21:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1380d819ef47cbd38344f96b6f94299ab9d515207ef645e8b52d816a8d5ca366","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:50:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:50:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1380d819ef47cbd38344f96b6f94299ab9d515207ef645e8b52d816a8d5ca366"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1380d819ef47cbd38344f96b6f94299ab9d515207ef645e8b52d816a8d5ca366","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1380d819ef47cbd38344f96b6f94299ab9d515207ef645e8b52d816a8d5ca366","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a7bdbd6781653a7f975e294cb740f06ead39562a5d603a71f66539255b682c8"} {"level":"info","ts":"2026-07-13T21:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1380d819ef47cbd38344f96b6f94299ab9d515207ef645e8b52d816a8d5ca366"} {"level":"debug","ts":"2026-07-13T21:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d85ea6aaa6a2ac5985407e9d46fe00a2bb4ba2e11ca2b8477df8f72c34b02b0d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:50:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:50:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d85ea6aaa6a2ac5985407e9d46fe00a2bb4ba2e11ca2b8477df8f72c34b02b0d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb0948084be169d330a9f585d552f52dff34c865db103cd6a1c8881adf514d72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:50:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:50:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb0948084be169d330a9f585d552f52dff34c865db103cd6a1c8881adf514d72","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d85ea6aaa6a2ac5985407e9d46fe00a2bb4ba2e11ca2b8477df8f72c34b02b0d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7973a4655bccec67e29f4275c106844c57f0f69669c472add0f706aea165ccce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:50:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:50:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d85ea6aaa6a2ac5985407e9d46fe00a2bb4ba2e11ca2b8477df8f72c34b02b0d"} {"level":"info","ts":"2026-07-13T21:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7973a4655bccec67e29f4275c106844c57f0f69669c472add0f706aea165ccce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb0948084be169d330a9f585d552f52dff34c865db103cd6a1c8881adf514d72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:50:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:50:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb0948084be169d330a9f585d552f52dff34c865db103cd6a1c8881adf514d72","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d85ea6aaa6a2ac5985407e9d46fe00a2bb4ba2e11ca2b8477df8f72c34b02b0d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:50:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:50:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d85ea6aaa6a2ac5985407e9d46fe00a2bb4ba2e11ca2b8477df8f72c34b02b0d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d85ea6aaa6a2ac5985407e9d46fe00a2bb4ba2e11ca2b8477df8f72c34b02b0d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7973a4655bccec67e29f4275c106844c57f0f69669c472add0f706aea165ccce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb0948084be169d330a9f585d552f52dff34c865db103cd6a1c8881adf514d72","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d85ea6aaa6a2ac5985407e9d46fe00a2bb4ba2e11ca2b8477df8f72c34b02b0d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb0948084be169d330a9f585d552f52dff34c865db103cd6a1c8881adf514d72"} {"level":"debug","ts":"2026-07-13T21:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7973a4655bccec67e29f4275c106844c57f0f69669c472add0f706aea165ccce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:50:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:50:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7973a4655bccec67e29f4275c106844c57f0f69669c472add0f706aea165ccce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb0948084be169d330a9f585d552f52dff34c865db103cd6a1c8881adf514d72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:50:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:50:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cb0948084be169d330a9f585d552f52dff34c865db103cd6a1c8881adf514d72"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb0948084be169d330a9f585d552f52dff34c865db103cd6a1c8881adf514d72","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7973a4655bccec67e29f4275c106844c57f0f69669c472add0f706aea165ccce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb0948084be169d330a9f585d552f52dff34c865db103cd6a1c8881adf514d72","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7973a4655bccec67e29f4275c106844c57f0f69669c472add0f706aea165ccce","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7973a4655bccec67e29f4275c106844c57f0f69669c472add0f706aea165ccce"} {"level":"info","ts":"2026-07-13T21:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d85ea6aaa6a2ac5985407e9d46fe00a2bb4ba2e11ca2b8477df8f72c34b02b0d"} {"level":"info","ts":"2026-07-13T21:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb0948084be169d330a9f585d552f52dff34c865db103cd6a1c8881adf514d72"} {"level":"info","ts":"2026-07-13T21:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7973a4655bccec67e29f4275c106844c57f0f69669c472add0f706aea165ccce"} {"level":"debug","ts":"2026-07-13T21:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7973a4655bccec67e29f4275c106844c57f0f69669c472add0f706aea165ccce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:50:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:50:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7973a4655bccec67e29f4275c106844c57f0f69669c472add0f706aea165ccce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7973a4655bccec67e29f4275c106844c57f0f69669c472add0f706aea165ccce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7973a4655bccec67e29f4275c106844c57f0f69669c472add0f706aea165ccce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:50:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:50:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7973a4655bccec67e29f4275c106844c57f0f69669c472add0f706aea165ccce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7973a4655bccec67e29f4275c106844c57f0f69669c472add0f706aea165ccce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7973a4655bccec67e29f4275c106844c57f0f69669c472add0f706aea165ccce","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7973a4655bccec67e29f4275c106844c57f0f69669c472add0f706aea165ccce"} {"level":"debug","ts":"2026-07-13T21:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7973a4655bccec67e29f4275c106844c57f0f69669c472add0f706aea165ccce","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7973a4655bccec67e29f4275c106844c57f0f69669c472add0f706aea165ccce"} {"level":"debug","ts":"2026-07-13T21:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7973a4655bccec67e29f4275c106844c57f0f69669c472add0f706aea165ccce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:50:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:50:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7973a4655bccec67e29f4275c106844c57f0f69669c472add0f706aea165ccce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7973a4655bccec67e29f4275c106844c57f0f69669c472add0f706aea165ccce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7973a4655bccec67e29f4275c106844c57f0f69669c472add0f706aea165ccce","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7973a4655bccec67e29f4275c106844c57f0f69669c472add0f706aea165ccce"} {"level":"debug","ts":"2026-07-13T21:50:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc15ad6df7e5f8ea144e666e542f150898a07c425fd64d7c00d4f6c31d178607","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:50:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:50:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:50:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc15ad6df7e5f8ea144e666e542f150898a07c425fd64d7c00d4f6c31d178607","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:50:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc15ad6df7e5f8ea144e666e542f150898a07c425fd64d7c00d4f6c31d178607","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:50:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:50:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:50:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc15ad6df7e5f8ea144e666e542f150898a07c425fd64d7c00d4f6c31d178607"} {"level":"info","ts":"2026-07-13T21:50:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc15ad6df7e5f8ea144e666e542f150898a07c425fd64d7c00d4f6c31d178607","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:50:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc15ad6df7e5f8ea144e666e542f150898a07c425fd64d7c00d4f6c31d178607","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:50:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:50:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-13T21:50:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"bc15ad6df7e5f8ea144e666e542f150898a07c425fd64d7c00d4f6c31d178607","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"bc15ad6df7e5f8ea144e666e542f150898a07c425fd64d7c00d4f6c31d178607\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-13T21:50:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc15ad6df7e5f8ea144e666e542f150898a07c425fd64d7c00d4f6c31d178607","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:50:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc15ad6df7e5f8ea144e666e542f150898a07c425fd64d7c00d4f6c31d178607","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:50:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc15ad6df7e5f8ea144e666e542f150898a07c425fd64d7c00d4f6c31d178607"} {"level":"info","ts":"2026-07-13T21:50:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc15ad6df7e5f8ea144e666e542f150898a07c425fd64d7c00d4f6c31d178607"} {"level":"debug","ts":"2026-07-13T21:50:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c48641a8309e2e67a05d45d2a48542600e15944ac283cdd69ece4f2771f62d89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:50:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:50:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:50:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c48641a8309e2e67a05d45d2a48542600e15944ac283cdd69ece4f2771f62d89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:50:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c48641a8309e2e67a05d45d2a48542600e15944ac283cdd69ece4f2771f62d89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:50:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c48641a8309e2e67a05d45d2a48542600e15944ac283cdd69ece4f2771f62d89","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:50:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c48641a8309e2e67a05d45d2a48542600e15944ac283cdd69ece4f2771f62d89"} {"level":"debug","ts":"2026-07-13T21:50:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc15ad6df7e5f8ea144e666e542f150898a07c425fd64d7c00d4f6c31d178607","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:50:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:50:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc15ad6df7e5f8ea144e666e542f150898a07c425fd64d7c00d4f6c31d178607"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:50:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc15ad6df7e5f8ea144e666e542f150898a07c425fd64d7c00d4f6c31d178607","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:50:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc15ad6df7e5f8ea144e666e542f150898a07c425fd64d7c00d4f6c31d178607","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:50:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c48641a8309e2e67a05d45d2a48542600e15944ac283cdd69ece4f2771f62d89","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:50:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c48641a8309e2e67a05d45d2a48542600e15944ac283cdd69ece4f2771f62d89"} {"level":"info","ts":"2026-07-13T21:50:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc15ad6df7e5f8ea144e666e542f150898a07c425fd64d7c00d4f6c31d178607"} {"level":"debug","ts":"2026-07-13T21:50:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c48641a8309e2e67a05d45d2a48542600e15944ac283cdd69ece4f2771f62d89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:50:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:50:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c48641a8309e2e67a05d45d2a48542600e15944ac283cdd69ece4f2771f62d89"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:50:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c48641a8309e2e67a05d45d2a48542600e15944ac283cdd69ece4f2771f62d89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:50:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c48641a8309e2e67a05d45d2a48542600e15944ac283cdd69ece4f2771f62d89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:50:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:50:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:50:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c48641a8309e2e67a05d45d2a48542600e15944ac283cdd69ece4f2771f62d89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:50:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c48641a8309e2e67a05d45d2a48542600e15944ac283cdd69ece4f2771f62d89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:50:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c48641a8309e2e67a05d45d2a48542600e15944ac283cdd69ece4f2771f62d89","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:50:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c48641a8309e2e67a05d45d2a48542600e15944ac283cdd69ece4f2771f62d89"} {"level":"debug","ts":"2026-07-13T21:50:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c48641a8309e2e67a05d45d2a48542600e15944ac283cdd69ece4f2771f62d89","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:50:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c48641a8309e2e67a05d45d2a48542600e15944ac283cdd69ece4f2771f62d89"} {"level":"debug","ts":"2026-07-13T21:50:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c48641a8309e2e67a05d45d2a48542600e15944ac283cdd69ece4f2771f62d89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:50:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:50:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c48641a8309e2e67a05d45d2a48542600e15944ac283cdd69ece4f2771f62d89"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:50:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c48641a8309e2e67a05d45d2a48542600e15944ac283cdd69ece4f2771f62d89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:50:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c48641a8309e2e67a05d45d2a48542600e15944ac283cdd69ece4f2771f62d89","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:50:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c48641a8309e2e67a05d45d2a48542600e15944ac283cdd69ece4f2771f62d89"} {"level":"debug","ts":"2026-07-13T21:50:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af242c1f48ca43c7b78f87346345e6dd43ccc306044b05c8a5e3361f168d9a36","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:50:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:50:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:50:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af242c1f48ca43c7b78f87346345e6dd43ccc306044b05c8a5e3361f168d9a36","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:50:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af242c1f48ca43c7b78f87346345e6dd43ccc306044b05c8a5e3361f168d9a36","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:50:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af242c1f48ca43c7b78f87346345e6dd43ccc306044b05c8a5e3361f168d9a36","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:50:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af242c1f48ca43c7b78f87346345e6dd43ccc306044b05c8a5e3361f168d9a36"} {"level":"debug","ts":"2026-07-13T21:50:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af242c1f48ca43c7b78f87346345e6dd43ccc306044b05c8a5e3361f168d9a36","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:50:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af242c1f48ca43c7b78f87346345e6dd43ccc306044b05c8a5e3361f168d9a36"} {"level":"debug","ts":"2026-07-13T21:50:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af242c1f48ca43c7b78f87346345e6dd43ccc306044b05c8a5e3361f168d9a36","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:50:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:50:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["af242c1f48ca43c7b78f87346345e6dd43ccc306044b05c8a5e3361f168d9a36"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:50:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af242c1f48ca43c7b78f87346345e6dd43ccc306044b05c8a5e3361f168d9a36","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:50:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af242c1f48ca43c7b78f87346345e6dd43ccc306044b05c8a5e3361f168d9a36","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:50:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:50:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:50:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af242c1f48ca43c7b78f87346345e6dd43ccc306044b05c8a5e3361f168d9a36","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:50:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af242c1f48ca43c7b78f87346345e6dd43ccc306044b05c8a5e3361f168d9a36","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:50:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af242c1f48ca43c7b78f87346345e6dd43ccc306044b05c8a5e3361f168d9a36","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:50:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af242c1f48ca43c7b78f87346345e6dd43ccc306044b05c8a5e3361f168d9a36"} {"level":"debug","ts":"2026-07-13T21:50:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af242c1f48ca43c7b78f87346345e6dd43ccc306044b05c8a5e3361f168d9a36","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:50:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af242c1f48ca43c7b78f87346345e6dd43ccc306044b05c8a5e3361f168d9a36"} {"level":"debug","ts":"2026-07-13T21:50:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af242c1f48ca43c7b78f87346345e6dd43ccc306044b05c8a5e3361f168d9a36","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:50:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:50:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["af242c1f48ca43c7b78f87346345e6dd43ccc306044b05c8a5e3361f168d9a36"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:50:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af242c1f48ca43c7b78f87346345e6dd43ccc306044b05c8a5e3361f168d9a36","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:50:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af242c1f48ca43c7b78f87346345e6dd43ccc306044b05c8a5e3361f168d9a36","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:50:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59fd6f75af8efa0ea3c760437ac095201bc9397336cc36c830ee37a9f27524fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:50:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:50:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:50:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59fd6f75af8efa0ea3c760437ac095201bc9397336cc36c830ee37a9f27524fb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:50:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af242c1f48ca43c7b78f87346345e6dd43ccc306044b05c8a5e3361f168d9a36"} {"level":"debug","ts":"2026-07-13T21:50:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59fd6f75af8efa0ea3c760437ac095201bc9397336cc36c830ee37a9f27524fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:50:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:50:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:50:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59fd6f75af8efa0ea3c760437ac095201bc9397336cc36c830ee37a9f27524fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:50:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59fd6f75af8efa0ea3c760437ac095201bc9397336cc36c830ee37a9f27524fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:50:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:50:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:50:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59fd6f75af8efa0ea3c760437ac095201bc9397336cc36c830ee37a9f27524fb"} {"level":"error","ts":"2026-07-13T21:50:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"59fd6f75af8efa0ea3c760437ac095201bc9397336cc36c830ee37a9f27524fb","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"59fd6f75af8efa0ea3c760437ac095201bc9397336cc36c830ee37a9f27524fb\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-13T21:50:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"59fd6f75af8efa0ea3c760437ac095201bc9397336cc36c830ee37a9f27524fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:50:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"59fd6f75af8efa0ea3c760437ac095201bc9397336cc36c830ee37a9f27524fb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:50:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59fd6f75af8efa0ea3c760437ac095201bc9397336cc36c830ee37a9f27524fb"} {"level":"debug","ts":"2026-07-13T21:50:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a8b26846453728812a63b057ea7016489c40a68e22081c536b8c9e2ccaf6543","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:50:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:50:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:50:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a8b26846453728812a63b057ea7016489c40a68e22081c536b8c9e2ccaf6543","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:50:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a8b26846453728812a63b057ea7016489c40a68e22081c536b8c9e2ccaf6543","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:50:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a8b26846453728812a63b057ea7016489c40a68e22081c536b8c9e2ccaf6543","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:50:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a8b26846453728812a63b057ea7016489c40a68e22081c536b8c9e2ccaf6543"} {"level":"debug","ts":"2026-07-13T21:50:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59fd6f75af8efa0ea3c760437ac095201bc9397336cc36c830ee37a9f27524fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:50:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:50:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["59fd6f75af8efa0ea3c760437ac095201bc9397336cc36c830ee37a9f27524fb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:50:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59fd6f75af8efa0ea3c760437ac095201bc9397336cc36c830ee37a9f27524fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:50:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a8b26846453728812a63b057ea7016489c40a68e22081c536b8c9e2ccaf6543","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:50:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"59fd6f75af8efa0ea3c760437ac095201bc9397336cc36c830ee37a9f27524fb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:50:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a8b26846453728812a63b057ea7016489c40a68e22081c536b8c9e2ccaf6543"} {"level":"info","ts":"2026-07-13T21:50:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59fd6f75af8efa0ea3c760437ac095201bc9397336cc36c830ee37a9f27524fb"} {"level":"debug","ts":"2026-07-13T21:50:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a8b26846453728812a63b057ea7016489c40a68e22081c536b8c9e2ccaf6543","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:50:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:50:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6a8b26846453728812a63b057ea7016489c40a68e22081c536b8c9e2ccaf6543"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:50:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a8b26846453728812a63b057ea7016489c40a68e22081c536b8c9e2ccaf6543","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:50:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a8b26846453728812a63b057ea7016489c40a68e22081c536b8c9e2ccaf6543","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:50:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:50:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:50:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a8b26846453728812a63b057ea7016489c40a68e22081c536b8c9e2ccaf6543","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:50:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9c588a307ba8480921ac9347fd526993aa73c32e5e4813a434bd200d3c318e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:50:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:50:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:50:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a8b26846453728812a63b057ea7016489c40a68e22081c536b8c9e2ccaf6543"} {"level":"info","ts":"2026-07-13T21:50:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9c588a307ba8480921ac9347fd526993aa73c32e5e4813a434bd200d3c318e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:50:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a8b26846453728812a63b057ea7016489c40a68e22081c536b8c9e2ccaf6543","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:50:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:50:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6a8b26846453728812a63b057ea7016489c40a68e22081c536b8c9e2ccaf6543"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:50:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9c588a307ba8480921ac9347fd526993aa73c32e5e4813a434bd200d3c318e5"} {"level":"info","ts":"2026-07-13T21:50:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a8b26846453728812a63b057ea7016489c40a68e22081c536b8c9e2ccaf6543","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:50:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9c588a307ba8480921ac9347fd526993aa73c32e5e4813a434bd200d3c318e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:50:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:50:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d9c588a307ba8480921ac9347fd526993aa73c32e5e4813a434bd200d3c318e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:50:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a8b26846453728812a63b057ea7016489c40a68e22081c536b8c9e2ccaf6543"} {"level":"info","ts":"2026-07-13T21:50:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9c588a307ba8480921ac9347fd526993aa73c32e5e4813a434bd200d3c318e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:50:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a8b26846453728812a63b057ea7016489c40a68e22081c536b8c9e2ccaf6543","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:50:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9c588a307ba8480921ac9347fd526993aa73c32e5e4813a434bd200d3c318e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:50:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:50:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:50:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9c588a307ba8480921ac9347fd526993aa73c32e5e4813a434bd200d3c318e5"} {"level":"info","ts":"2026-07-13T21:50:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9c588a307ba8480921ac9347fd526993aa73c32e5e4813a434bd200d3c318e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:50:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"910f30437f6c7c740f014240ccc8f04a710d14a0fff3f59c4d8ecf2bd99e6e96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:50:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:50:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:50:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a8b26846453728812a63b057ea7016489c40a68e22081c536b8c9e2ccaf6543"} {"level":"info","ts":"2026-07-13T21:50:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"910f30437f6c7c740f014240ccc8f04a710d14a0fff3f59c4d8ecf2bd99e6e96","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:50:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9c588a307ba8480921ac9347fd526993aa73c32e5e4813a434bd200d3c318e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:50:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:50:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d9c588a307ba8480921ac9347fd526993aa73c32e5e4813a434bd200d3c318e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:50:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9c588a307ba8480921ac9347fd526993aa73c32e5e4813a434bd200d3c318e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:50:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"910f30437f6c7c740f014240ccc8f04a710d14a0fff3f59c4d8ecf2bd99e6e96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:50:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:50:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:50:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/910f30437f6c7c740f014240ccc8f04a710d14a0fff3f59c4d8ecf2bd99e6e96"} {"level":"info","ts":"2026-07-13T21:50:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"910f30437f6c7c740f014240ccc8f04a710d14a0fff3f59c4d8ecf2bd99e6e96","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:50:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9c588a307ba8480921ac9347fd526993aa73c32e5e4813a434bd200d3c318e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:50:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:50:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:50:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9c588a307ba8480921ac9347fd526993aa73c32e5e4813a434bd200d3c318e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:50:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"910f30437f6c7c740f014240ccc8f04a710d14a0fff3f59c4d8ecf2bd99e6e96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:50:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:50:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["910f30437f6c7c740f014240ccc8f04a710d14a0fff3f59c4d8ecf2bd99e6e96"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:50:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9c588a307ba8480921ac9347fd526993aa73c32e5e4813a434bd200d3c318e5"} {"level":"info","ts":"2026-07-13T21:50:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"910f30437f6c7c740f014240ccc8f04a710d14a0fff3f59c4d8ecf2bd99e6e96","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:50:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a2a85e46c0361e26155e59d2ebd48213c32905c85b99e9d87b211bfe34b87001","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:50:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:50:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:50:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a2a85e46c0361e26155e59d2ebd48213c32905c85b99e9d87b211bfe34b87001","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:50:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9c588a307ba8480921ac9347fd526993aa73c32e5e4813a434bd200d3c318e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:50:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:50:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d9c588a307ba8480921ac9347fd526993aa73c32e5e4813a434bd200d3c318e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:50:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/910f30437f6c7c740f014240ccc8f04a710d14a0fff3f59c4d8ecf2bd99e6e96"} {"level":"info","ts":"2026-07-13T21:50:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9c588a307ba8480921ac9347fd526993aa73c32e5e4813a434bd200d3c318e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:50:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"910f30437f6c7c740f014240ccc8f04a710d14a0fff3f59c4d8ecf2bd99e6e96","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:50:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a2a85e46c0361e26155e59d2ebd48213c32905c85b99e9d87b211bfe34b87001","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:50:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:50:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:50:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a2a85e46c0361e26155e59d2ebd48213c32905c85b99e9d87b211bfe34b87001","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:50:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9c588a307ba8480921ac9347fd526993aa73c32e5e4813a434bd200d3c318e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:50:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a2a85e46c0361e26155e59d2ebd48213c32905c85b99e9d87b211bfe34b87001","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:50:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2a85e46c0361e26155e59d2ebd48213c32905c85b99e9d87b211bfe34b87001"} {"level":"debug","ts":"2026-07-13T21:50:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a2a85e46c0361e26155e59d2ebd48213c32905c85b99e9d87b211bfe34b87001","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:50:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:50:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a2a85e46c0361e26155e59d2ebd48213c32905c85b99e9d87b211bfe34b87001"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:50:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a2a85e46c0361e26155e59d2ebd48213c32905c85b99e9d87b211bfe34b87001","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:50:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a2a85e46c0361e26155e59d2ebd48213c32905c85b99e9d87b211bfe34b87001","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:50:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9c588a307ba8480921ac9347fd526993aa73c32e5e4813a434bd200d3c318e5"} {"level":"info","ts":"2026-07-13T21:50:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/910f30437f6c7c740f014240ccc8f04a710d14a0fff3f59c4d8ecf2bd99e6e96"} {"level":"debug","ts":"2026-07-13T21:50:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3fff53257286e7107f76d02468c3f2017866329555fe3bc0bbeefe1dc4f44dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:50:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:50:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:50:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2a85e46c0361e26155e59d2ebd48213c32905c85b99e9d87b211bfe34b87001"} {"level":"info","ts":"2026-07-13T21:50:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3fff53257286e7107f76d02468c3f2017866329555fe3bc0bbeefe1dc4f44dc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:50:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3fff53257286e7107f76d02468c3f2017866329555fe3bc0bbeefe1dc4f44dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:50:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:50:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:50:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3fff53257286e7107f76d02468c3f2017866329555fe3bc0bbeefe1dc4f44dc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:50:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3fff53257286e7107f76d02468c3f2017866329555fe3bc0bbeefe1dc4f44dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:50:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:50:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:50:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3fff53257286e7107f76d02468c3f2017866329555fe3bc0bbeefe1dc4f44dc"} {"level":"error","ts":"2026-07-13T21:50:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f3fff53257286e7107f76d02468c3f2017866329555fe3bc0bbeefe1dc4f44dc","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f3fff53257286e7107f76d02468c3f2017866329555fe3bc0bbeefe1dc4f44dc\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-13T21:50:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3fff53257286e7107f76d02468c3f2017866329555fe3bc0bbeefe1dc4f44dc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:50:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3fff53257286e7107f76d02468c3f2017866329555fe3bc0bbeefe1dc4f44dc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:50:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3fff53257286e7107f76d02468c3f2017866329555fe3bc0bbeefe1dc4f44dc"} {"level":"debug","ts":"2026-07-13T21:50:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d99619663c9e99ed2b4eab5fdaa2776ae3cb7de53d501eed7801d313a819e5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:50:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:50:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:50:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d99619663c9e99ed2b4eab5fdaa2776ae3cb7de53d501eed7801d313a819e5a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:50:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6cb0dc2fb1a7c59ea453750647ac7970008e518de337e0364d7704fda2e3713","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:50:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:50:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:50:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d99619663c9e99ed2b4eab5fdaa2776ae3cb7de53d501eed7801d313a819e5a"} {"level":"info","ts":"2026-07-13T21:50:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6cb0dc2fb1a7c59ea453750647ac7970008e518de337e0364d7704fda2e3713","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:50:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d99619663c9e99ed2b4eab5fdaa2776ae3cb7de53d501eed7801d313a819e5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:50:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:50:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3d99619663c9e99ed2b4eab5fdaa2776ae3cb7de53d501eed7801d313a819e5a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:50:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d99619663c9e99ed2b4eab5fdaa2776ae3cb7de53d501eed7801d313a819e5a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:50:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3fff53257286e7107f76d02468c3f2017866329555fe3bc0bbeefe1dc4f44dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:50:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:50:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f3fff53257286e7107f76d02468c3f2017866329555fe3bc0bbeefe1dc4f44dc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:50:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6cb0dc2fb1a7c59ea453750647ac7970008e518de337e0364d7704fda2e3713"} {"level":"info","ts":"2026-07-13T21:50:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3fff53257286e7107f76d02468c3f2017866329555fe3bc0bbeefe1dc4f44dc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:50:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6cb0dc2fb1a7c59ea453750647ac7970008e518de337e0364d7704fda2e3713","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:50:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:50:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a6cb0dc2fb1a7c59ea453750647ac7970008e518de337e0364d7704fda2e3713"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:50:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6cb0dc2fb1a7c59ea453750647ac7970008e518de337e0364d7704fda2e3713","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:50:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d99619663c9e99ed2b4eab5fdaa2776ae3cb7de53d501eed7801d313a819e5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:50:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:50:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:50:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d99619663c9e99ed2b4eab5fdaa2776ae3cb7de53d501eed7801d313a819e5a"} {"level":"info","ts":"2026-07-13T21:50:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d99619663c9e99ed2b4eab5fdaa2776ae3cb7de53d501eed7801d313a819e5a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:50:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3fff53257286e7107f76d02468c3f2017866329555fe3bc0bbeefe1dc4f44dc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:50:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6cb0dc2fb1a7c59ea453750647ac7970008e518de337e0364d7704fda2e3713","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:50:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:50:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:50:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6cb0dc2fb1a7c59ea453750647ac7970008e518de337e0364d7704fda2e3713"} {"level":"info","ts":"2026-07-13T21:50:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6cb0dc2fb1a7c59ea453750647ac7970008e518de337e0364d7704fda2e3713","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:50:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d99619663c9e99ed2b4eab5fdaa2776ae3cb7de53d501eed7801d313a819e5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:50:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:50:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3d99619663c9e99ed2b4eab5fdaa2776ae3cb7de53d501eed7801d313a819e5a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:50:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d99619663c9e99ed2b4eab5fdaa2776ae3cb7de53d501eed7801d313a819e5a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:50:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6cb0dc2fb1a7c59ea453750647ac7970008e518de337e0364d7704fda2e3713","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:50:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:50:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a6cb0dc2fb1a7c59ea453750647ac7970008e518de337e0364d7704fda2e3713"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:50:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3fff53257286e7107f76d02468c3f2017866329555fe3bc0bbeefe1dc4f44dc"} {"level":"info","ts":"2026-07-13T21:50:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6cb0dc2fb1a7c59ea453750647ac7970008e518de337e0364d7704fda2e3713","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:50:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa5693f14d78b682c853571e035eb193f228e624e2bf1f63f4343f843df96176","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:50:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:50:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:50:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa5693f14d78b682c853571e035eb193f228e624e2bf1f63f4343f843df96176","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:50:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d99619663c9e99ed2b4eab5fdaa2776ae3cb7de53d501eed7801d313a819e5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:50:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:50:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:50:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d99619663c9e99ed2b4eab5fdaa2776ae3cb7de53d501eed7801d313a819e5a"} {"level":"info","ts":"2026-07-13T21:50:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d99619663c9e99ed2b4eab5fdaa2776ae3cb7de53d501eed7801d313a819e5a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:50:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6cb0dc2fb1a7c59ea453750647ac7970008e518de337e0364d7704fda2e3713","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:50:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:50:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:50:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6cb0dc2fb1a7c59ea453750647ac7970008e518de337e0364d7704fda2e3713","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:50:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa5693f14d78b682c853571e035eb193f228e624e2bf1f63f4343f843df96176","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:50:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d99619663c9e99ed2b4eab5fdaa2776ae3cb7de53d501eed7801d313a819e5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:50:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:50:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3d99619663c9e99ed2b4eab5fdaa2776ae3cb7de53d501eed7801d313a819e5a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:50:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6cb0dc2fb1a7c59ea453750647ac7970008e518de337e0364d7704fda2e3713"} {"level":"info","ts":"2026-07-13T21:50:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d99619663c9e99ed2b4eab5fdaa2776ae3cb7de53d501eed7801d313a819e5a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:50:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6cb0dc2fb1a7c59ea453750647ac7970008e518de337e0364d7704fda2e3713","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:50:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:50:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a6cb0dc2fb1a7c59ea453750647ac7970008e518de337e0364d7704fda2e3713"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:50:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa5693f14d78b682c853571e035eb193f228e624e2bf1f63f4343f843df96176"} {"level":"info","ts":"2026-07-13T21:50:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6cb0dc2fb1a7c59ea453750647ac7970008e518de337e0364d7704fda2e3713","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:50:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa5693f14d78b682c853571e035eb193f228e624e2bf1f63f4343f843df96176","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:50:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:50:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aa5693f14d78b682c853571e035eb193f228e624e2bf1f63f4343f843df96176"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:50:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa5693f14d78b682c853571e035eb193f228e624e2bf1f63f4343f843df96176","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:50:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d99619663c9e99ed2b4eab5fdaa2776ae3cb7de53d501eed7801d313a819e5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:50:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:50:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:50:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d99619663c9e99ed2b4eab5fdaa2776ae3cb7de53d501eed7801d313a819e5a"} {"level":"info","ts":"2026-07-13T21:50:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d99619663c9e99ed2b4eab5fdaa2776ae3cb7de53d501eed7801d313a819e5a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:50:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6cb0dc2fb1a7c59ea453750647ac7970008e518de337e0364d7704fda2e3713","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:50:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:50:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:50:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6cb0dc2fb1a7c59ea453750647ac7970008e518de337e0364d7704fda2e3713","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:50:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa5693f14d78b682c853571e035eb193f228e624e2bf1f63f4343f843df96176","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:50:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d99619663c9e99ed2b4eab5fdaa2776ae3cb7de53d501eed7801d313a819e5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:50:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:50:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3d99619663c9e99ed2b4eab5fdaa2776ae3cb7de53d501eed7801d313a819e5a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:50:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6cb0dc2fb1a7c59ea453750647ac7970008e518de337e0364d7704fda2e3713"} {"level":"info","ts":"2026-07-13T21:50:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d99619663c9e99ed2b4eab5fdaa2776ae3cb7de53d501eed7801d313a819e5a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:50:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6cb0dc2fb1a7c59ea453750647ac7970008e518de337e0364d7704fda2e3713","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:50:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:50:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a6cb0dc2fb1a7c59ea453750647ac7970008e518de337e0364d7704fda2e3713"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:50:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6cb0dc2fb1a7c59ea453750647ac7970008e518de337e0364d7704fda2e3713","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:50:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d99619663c9e99ed2b4eab5fdaa2776ae3cb7de53d501eed7801d313a819e5a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:50:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6cb0dc2fb1a7c59ea453750647ac7970008e518de337e0364d7704fda2e3713","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:50:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa5693f14d78b682c853571e035eb193f228e624e2bf1f63f4343f843df96176"} {"level":"info","ts":"2026-07-13T21:50:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d99619663c9e99ed2b4eab5fdaa2776ae3cb7de53d501eed7801d313a819e5a"} {"level":"info","ts":"2026-07-13T21:50:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6cb0dc2fb1a7c59ea453750647ac7970008e518de337e0364d7704fda2e3713"} {"level":"info","ts":"2026-07-13T21:51:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e315fa1f-52ca-44b5-9066-5cca1441f7ae","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:48754","PortSpecifier":{"PortValue":48754}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e315fa1f-52ca-44b5-9066-5cca1441f7ae","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8e2974.apps.294019ed-43ef-46f4-a4ce-c5c88067cb0f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-13T21:51:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e315fa1f-52ca-44b5-9066-5cca1441f7ae","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:48754","PortSpecifier":{"PortValue":48754}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783979461,"nanos":616667506},"http":{"id":"e315fa1f-52ca-44b5-9066-5cca1441f7ae","method":"POST","headers":{":authority":"e2e-shared-a-8e2974.apps.294019ed-43ef-46f4-a4ce-c5c88067cb0f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T21:51:01Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e315fa1f-52ca-44b5-9066-5cca1441f7ae","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-13T21:51:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e315fa1f-52ca-44b5-9066-5cca1441f7ae","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b62e8f90-7460-4bb9-9510-7f1180036f2d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=817b74d9-4ac4-4f4d-b17a-056132976a9e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c5c88067cb0f"]}} {"level":"debug","ts":"2026-07-13T21:51:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e315fa1f-52ca-44b5-9066-5cca1441f7ae","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c5c88067cb0f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=817b74d9-4ac4-4f4d-b17a-056132976a9e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b62e8f90-7460-4bb9-9510-7f1180036f2d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"407be41904019b18b50107a0a97b06c04b484a47240e0d114cc0dd8717c86ffd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8e2974.apps.294019ed-43ef-46f4-a4ce-c5c88067cb0f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T21:51:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e315fa1f-52ca-44b5-9066-5cca1441f7ae","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T21:51:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e315fa1f-52ca-44b5-9066-5cca1441f7ae","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T21:51:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e315fa1f-52ca-44b5-9066-5cca1441f7ae","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8e2974/auth-test-model-8e2974\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T21:51:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e315fa1f-52ca-44b5-9066-5cca1441f7ae","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-13T21:51:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e315fa1f-52ca-44b5-9066-5cca1441f7ae","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-13T21:51:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e315fa1f-52ca-44b5-9066-5cca1441f7ae","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-13T21:51:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e315fa1f-52ca-44b5-9066-5cca1441f7ae","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-13T21:51:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e315fa1f-52ca-44b5-9066-5cca1441f7ae","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-13T21:51:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e8af9beb-c75a-4258-a83d-8023368d38b3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:52966","PortSpecifier":{"PortValue":52966}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e8af9beb-c75a-4258-a83d-8023368d38b3","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-884921.apps.294019ed-43ef-46f4-a4ce-c5c88067cb0f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-13T21:51:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e8af9beb-c75a-4258-a83d-8023368d38b3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:52966","PortSpecifier":{"PortValue":52966}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783979461,"nanos":680080440},"http":{"id":"e8af9beb-c75a-4258-a83d-8023368d38b3","method":"POST","headers":{":authority":"e2e-shared-b-884921.apps.294019ed-43ef-46f4-a4ce-c5c88067cb0f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T21:51:01Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e8af9beb-c75a-4258-a83d-8023368d38b3","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-13T21:51:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e8af9beb-c75a-4258-a83d-8023368d38b3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b62e8f90-7460-4bb9-9510-7f1180036f2d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=817b74d9-4ac4-4f4d-b17a-056132976a9e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c5c88067cb0f"]}} {"level":"debug","ts":"2026-07-13T21:51:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e8af9beb-c75a-4258-a83d-8023368d38b3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c5c88067cb0f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=817b74d9-4ac4-4f4d-b17a-056132976a9e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b62e8f90-7460-4bb9-9510-7f1180036f2d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d9c588a307ba8480921ac9347fd526993aa73c32e5e4813a434bd200d3c318e5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-884921.apps.294019ed-43ef-46f4-a4ce-c5c88067cb0f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T21:51:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e8af9beb-c75a-4258-a83d-8023368d38b3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T21:51:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e8af9beb-c75a-4258-a83d-8023368d38b3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T21:51:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e8af9beb-c75a-4258-a83d-8023368d38b3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-884921/auth-test-model-884921\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T21:51:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e8af9beb-c75a-4258-a83d-8023368d38b3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-13T21:51:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e8af9beb-c75a-4258-a83d-8023368d38b3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-13T21:51:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e8af9beb-c75a-4258-a83d-8023368d38b3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-13T21:51:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e8af9beb-c75a-4258-a83d-8023368d38b3","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-13T21:51:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e8af9beb-c75a-4258-a83d-8023368d38b3","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-13T21:51:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f1ea8441-6961-49a6-8ffb-7788fa1380f7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:48762","PortSpecifier":{"PortValue":48762}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f1ea8441-6961-49a6-8ffb-7788fa1380f7","method":"GET","path":"/maas-api/v1/api-keys/9cbe5de1-592f-4526-997f-771c3c8333a8","host":"e2e-shared-a-8e2974.apps.294019ed-43ef-46f4-a4ce-c5c88067cb0f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-13T21:51:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f1ea8441-6961-49a6-8ffb-7788fa1380f7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:48762","PortSpecifier":{"PortValue":48762}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783979461,"nanos":740622925},"http":{"id":"f1ea8441-6961-49a6-8ffb-7788fa1380f7","method":"GET","headers":{":authority":"e2e-shared-a-8e2974.apps.294019ed-43ef-46f4-a4ce-c5c88067cb0f.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/9cbe5de1-592f-4526-997f-771c3c8333a8",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T21:51:01Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f1ea8441-6961-49a6-8ffb-7788fa1380f7","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-13T21:51:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f1ea8441-6961-49a6-8ffb-7788fa1380f7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b62e8f90-7460-4bb9-9510-7f1180036f2d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=817b74d9-4ac4-4f4d-b17a-056132976a9e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c5c88067cb0f"]}} {"level":"debug","ts":"2026-07-13T21:51:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f1ea8441-6961-49a6-8ffb-7788fa1380f7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c5c88067cb0f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=817b74d9-4ac4-4f4d-b17a-056132976a9e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b62e8f90-7460-4bb9-9510-7f1180036f2d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"407be41904019b18b50107a0a97b06c04b484a47240e0d114cc0dd8717c86ffd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8e2974.apps.294019ed-43ef-46f4-a4ce-c5c88067cb0f.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/9cbe5de1-592f-4526-997f-771c3c8333a8",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T21:51:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f1ea8441-6961-49a6-8ffb-7788fa1380f7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T21:51:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f1ea8441-6961-49a6-8ffb-7788fa1380f7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T21:51:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f1ea8441-6961-49a6-8ffb-7788fa1380f7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8e2974/auth-test-model-8e2974\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T21:51:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f1ea8441-6961-49a6-8ffb-7788fa1380f7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-13T21:51:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f1ea8441-6961-49a6-8ffb-7788fa1380f7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-13T21:51:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f1ea8441-6961-49a6-8ffb-7788fa1380f7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-13T21:51:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f1ea8441-6961-49a6-8ffb-7788fa1380f7","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-13T21:51:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f1ea8441-6961-49a6-8ffb-7788fa1380f7","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-13T21:51:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b915a12e-04c9-4c3a-a7b1-33107d404309","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:52968","PortSpecifier":{"PortValue":52968}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b915a12e-04c9-4c3a-a7b1-33107d404309","method":"GET","path":"/maas-api/v1/api-keys/bbeac494-97f8-415f-9464-d3751b02327f","host":"e2e-shared-b-884921.apps.294019ed-43ef-46f4-a4ce-c5c88067cb0f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-13T21:51:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b915a12e-04c9-4c3a-a7b1-33107d404309","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:52968","PortSpecifier":{"PortValue":52968}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783979461,"nanos":793093351},"http":{"id":"b915a12e-04c9-4c3a-a7b1-33107d404309","method":"GET","headers":{":authority":"e2e-shared-b-884921.apps.294019ed-43ef-46f4-a4ce-c5c88067cb0f.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/bbeac494-97f8-415f-9464-d3751b02327f",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T21:51:01Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b915a12e-04c9-4c3a-a7b1-33107d404309","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-13T21:51:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b915a12e-04c9-4c3a-a7b1-33107d404309","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b62e8f90-7460-4bb9-9510-7f1180036f2d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=817b74d9-4ac4-4f4d-b17a-056132976a9e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c5c88067cb0f"]}} {"level":"debug","ts":"2026-07-13T21:51:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b915a12e-04c9-4c3a-a7b1-33107d404309","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c5c88067cb0f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=817b74d9-4ac4-4f4d-b17a-056132976a9e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b62e8f90-7460-4bb9-9510-7f1180036f2d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d9c588a307ba8480921ac9347fd526993aa73c32e5e4813a434bd200d3c318e5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-884921.apps.294019ed-43ef-46f4-a4ce-c5c88067cb0f.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/bbeac494-97f8-415f-9464-d3751b02327f",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T21:51:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b915a12e-04c9-4c3a-a7b1-33107d404309","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T21:51:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b915a12e-04c9-4c3a-a7b1-33107d404309","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T21:51:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b915a12e-04c9-4c3a-a7b1-33107d404309","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-884921/auth-test-model-884921\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T21:51:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b915a12e-04c9-4c3a-a7b1-33107d404309","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-13T21:51:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b915a12e-04c9-4c3a-a7b1-33107d404309","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-13T21:51:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b915a12e-04c9-4c3a-a7b1-33107d404309","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-13T21:51:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b915a12e-04c9-4c3a-a7b1-33107d404309","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-13T21:51:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b915a12e-04c9-4c3a-a7b1-33107d404309","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-13T21:51:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c2ebdb36-d596-4eda-960d-481423d02152","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:36804","PortSpecifier":{"PortValue":36804}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c2ebdb36-d596-4eda-960d-481423d02152","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8e2974.apps.294019ed-43ef-46f4-a4ce-c5c88067cb0f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-13T21:51:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c2ebdb36-d596-4eda-960d-481423d02152","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:36804","PortSpecifier":{"PortValue":36804}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783979478,"nanos":746770245},"http":{"id":"c2ebdb36-d596-4eda-960d-481423d02152","method":"POST","headers":{":authority":"e2e-shared-a-8e2974.apps.294019ed-43ef-46f4-a4ce-c5c88067cb0f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T21:51:18Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c2ebdb36-d596-4eda-960d-481423d02152","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-13T21:51:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c2ebdb36-d596-4eda-960d-481423d02152","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b62e8f90-7460-4bb9-9510-7f1180036f2d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=817b74d9-4ac4-4f4d-b17a-056132976a9e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c5c88067cb0f"]}} {"level":"debug","ts":"2026-07-13T21:51:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c2ebdb36-d596-4eda-960d-481423d02152","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c5c88067cb0f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=817b74d9-4ac4-4f4d-b17a-056132976a9e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b62e8f90-7460-4bb9-9510-7f1180036f2d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"407be41904019b18b50107a0a97b06c04b484a47240e0d114cc0dd8717c86ffd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8e2974.apps.294019ed-43ef-46f4-a4ce-c5c88067cb0f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T21:51:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c2ebdb36-d596-4eda-960d-481423d02152","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T21:51:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c2ebdb36-d596-4eda-960d-481423d02152","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T21:51:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c2ebdb36-d596-4eda-960d-481423d02152","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8e2974/auth-test-model-8e2974\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T21:51:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c2ebdb36-d596-4eda-960d-481423d02152","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-13T21:51:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c2ebdb36-d596-4eda-960d-481423d02152","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-13T21:51:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c2ebdb36-d596-4eda-960d-481423d02152","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-13T21:51:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c2ebdb36-d596-4eda-960d-481423d02152","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-13T21:51:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c2ebdb36-d596-4eda-960d-481423d02152","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-13T21:51:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e4c7f137-844f-479c-ac30-39fe8f2cda98","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:59740","PortSpecifier":{"PortValue":59740}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e4c7f137-844f-479c-ac30-39fe8f2cda98","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-884921.apps.294019ed-43ef-46f4-a4ce-c5c88067cb0f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-13T21:51:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e4c7f137-844f-479c-ac30-39fe8f2cda98","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:59740","PortSpecifier":{"PortValue":59740}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783979478,"nanos":790459250},"http":{"id":"e4c7f137-844f-479c-ac30-39fe8f2cda98","method":"POST","headers":{":authority":"e2e-shared-b-884921.apps.294019ed-43ef-46f4-a4ce-c5c88067cb0f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T21:51:18Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e4c7f137-844f-479c-ac30-39fe8f2cda98","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-13T21:51:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e4c7f137-844f-479c-ac30-39fe8f2cda98","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b62e8f90-7460-4bb9-9510-7f1180036f2d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=817b74d9-4ac4-4f4d-b17a-056132976a9e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c5c88067cb0f"]}} {"level":"debug","ts":"2026-07-13T21:51:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e4c7f137-844f-479c-ac30-39fe8f2cda98","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c5c88067cb0f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=817b74d9-4ac4-4f4d-b17a-056132976a9e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b62e8f90-7460-4bb9-9510-7f1180036f2d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d9c588a307ba8480921ac9347fd526993aa73c32e5e4813a434bd200d3c318e5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-884921.apps.294019ed-43ef-46f4-a4ce-c5c88067cb0f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T21:51:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e4c7f137-844f-479c-ac30-39fe8f2cda98","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T21:51:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e4c7f137-844f-479c-ac30-39fe8f2cda98","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T21:51:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e4c7f137-844f-479c-ac30-39fe8f2cda98","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-884921/auth-test-model-884921\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T21:51:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e4c7f137-844f-479c-ac30-39fe8f2cda98","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-13T21:51:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e4c7f137-844f-479c-ac30-39fe8f2cda98","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-13T21:51:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e4c7f137-844f-479c-ac30-39fe8f2cda98","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-13T21:51:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e4c7f137-844f-479c-ac30-39fe8f2cda98","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-13T21:51:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e4c7f137-844f-479c-ac30-39fe8f2cda98","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-13T21:51:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ed90a156-f05a-4d20-b84d-3f8246299465","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:36806","PortSpecifier":{"PortValue":36806}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ed90a156-f05a-4d20-b84d-3f8246299465","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-8e2974.apps.294019ed-43ef-46f4-a4ce-c5c88067cb0f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-13T21:51:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ed90a156-f05a-4d20-b84d-3f8246299465","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:36806","PortSpecifier":{"PortValue":36806}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783979478,"nanos":824787037},"http":{"id":"ed90a156-f05a-4d20-b84d-3f8246299465","method":"GET","headers":{":authority":"e2e-shared-a-8e2974.apps.294019ed-43ef-46f4-a4ce-c5c88067cb0f.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T21:51:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ed90a156-f05a-4d20-b84d-3f8246299465","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-kwdUdMoR3ErZc9su_gG0WLLAN4XX1lXxJmzr3nnBHeR2wrQl9KJSRY4eiExU"} {"level":"debug","ts":"2026-07-13T21:51:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ed90a156-f05a-4d20-b84d-3f8246299465","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8e2974.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-kwdUdMoR3ErZc9su_gG0WLLAN4XX1lXxJmzr3nnBHeR2wrQl9KJSRY4eiExU\"}"} {"level":"debug","ts":"2026-07-13T21:51:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ed90a156-f05a-4d20-b84d-3f8246299465","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8e2974.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"de613b87-a33d-4841-a6a1-653440e74ded","keyName":"e2e-auth-iso-a-226bec","subscription":"e2e-auth-iso-5b41a0","tenant":"e2e-shared-a-8e2974","userId":"de613b87-a33d-4841-a6a1-653440e74ded","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-13T21:51:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ed90a156-f05a-4d20-b84d-3f8246299465","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T21:51:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ed90a156-f05a-4d20-b84d-3f8246299465","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T21:51:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ed90a156-f05a-4d20-b84d-3f8246299465","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T21:51:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ed90a156-f05a-4d20-b84d-3f8246299465","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8e2974/auth-test-model-8e2974\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T21:51:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ed90a156-f05a-4d20-b84d-3f8246299465","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-5b41a0"} {"level":"debug","ts":"2026-07-13T21:51:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ed90a156-f05a-4d20-b84d-3f8246299465","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-13T21:51:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ed90a156-f05a-4d20-b84d-3f8246299465","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-13T21:51:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ed90a156-f05a-4d20-b84d-3f8246299465","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-13T21:51:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ed90a156-f05a-4d20-b84d-3f8246299465","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-13T21:51:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ed90a156-f05a-4d20-b84d-3f8246299465","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-13T21:51:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6f267901-e874-4abf-8d6a-b9c1e4e48b3b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:49652","PortSpecifier":{"PortValue":49652}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6f267901-e874-4abf-8d6a-b9c1e4e48b3b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8e2974.apps.294019ed-43ef-46f4-a4ce-c5c88067cb0f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-13T21:51:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6f267901-e874-4abf-8d6a-b9c1e4e48b3b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:49652","PortSpecifier":{"PortValue":49652}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783979493,"nanos":662489017},"http":{"id":"6f267901-e874-4abf-8d6a-b9c1e4e48b3b","method":"POST","headers":{":authority":"e2e-shared-a-8e2974.apps.294019ed-43ef-46f4-a4ce-c5c88067cb0f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T21:51:33Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6f267901-e874-4abf-8d6a-b9c1e4e48b3b","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-13T21:51:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6f267901-e874-4abf-8d6a-b9c1e4e48b3b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b62e8f90-7460-4bb9-9510-7f1180036f2d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=817b74d9-4ac4-4f4d-b17a-056132976a9e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c5c88067cb0f"]}} {"level":"debug","ts":"2026-07-13T21:51:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6f267901-e874-4abf-8d6a-b9c1e4e48b3b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c5c88067cb0f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=817b74d9-4ac4-4f4d-b17a-056132976a9e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b62e8f90-7460-4bb9-9510-7f1180036f2d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"407be41904019b18b50107a0a97b06c04b484a47240e0d114cc0dd8717c86ffd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8e2974.apps.294019ed-43ef-46f4-a4ce-c5c88067cb0f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T21:51:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6f267901-e874-4abf-8d6a-b9c1e4e48b3b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T21:51:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6f267901-e874-4abf-8d6a-b9c1e4e48b3b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T21:51:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6f267901-e874-4abf-8d6a-b9c1e4e48b3b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8e2974/auth-test-model-8e2974\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T21:51:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6f267901-e874-4abf-8d6a-b9c1e4e48b3b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-13T21:51:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6f267901-e874-4abf-8d6a-b9c1e4e48b3b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-13T21:51:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6f267901-e874-4abf-8d6a-b9c1e4e48b3b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-13T21:51:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6f267901-e874-4abf-8d6a-b9c1e4e48b3b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-13T21:51:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6f267901-e874-4abf-8d6a-b9c1e4e48b3b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-13T21:51:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"533322f9-a8be-44b1-b048-85185f45ea63","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:55446","PortSpecifier":{"PortValue":55446}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"533322f9-a8be-44b1-b048-85185f45ea63","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-884921.apps.294019ed-43ef-46f4-a4ce-c5c88067cb0f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-13T21:51:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"533322f9-a8be-44b1-b048-85185f45ea63","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:55446","PortSpecifier":{"PortValue":55446}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783979493,"nanos":698322426},"http":{"id":"533322f9-a8be-44b1-b048-85185f45ea63","method":"POST","headers":{":authority":"e2e-shared-b-884921.apps.294019ed-43ef-46f4-a4ce-c5c88067cb0f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T21:51:33Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"533322f9-a8be-44b1-b048-85185f45ea63","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-13T21:51:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"533322f9-a8be-44b1-b048-85185f45ea63","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b62e8f90-7460-4bb9-9510-7f1180036f2d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=817b74d9-4ac4-4f4d-b17a-056132976a9e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c5c88067cb0f"]}} {"level":"debug","ts":"2026-07-13T21:51:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"533322f9-a8be-44b1-b048-85185f45ea63","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c5c88067cb0f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=817b74d9-4ac4-4f4d-b17a-056132976a9e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b62e8f90-7460-4bb9-9510-7f1180036f2d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d9c588a307ba8480921ac9347fd526993aa73c32e5e4813a434bd200d3c318e5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-884921.apps.294019ed-43ef-46f4-a4ce-c5c88067cb0f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T21:51:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"533322f9-a8be-44b1-b048-85185f45ea63","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T21:51:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"533322f9-a8be-44b1-b048-85185f45ea63","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T21:51:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"533322f9-a8be-44b1-b048-85185f45ea63","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-884921/auth-test-model-884921\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T21:51:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"533322f9-a8be-44b1-b048-85185f45ea63","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-13T21:51:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"533322f9-a8be-44b1-b048-85185f45ea63","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-13T21:51:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"533322f9-a8be-44b1-b048-85185f45ea63","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-13T21:51:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"533322f9-a8be-44b1-b048-85185f45ea63","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-13T21:51:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"533322f9-a8be-44b1-b048-85185f45ea63","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-13T21:51:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d7fe524e-3e72-4830-a5eb-a88d0baf6bf6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:55450","PortSpecifier":{"PortValue":55450}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d7fe524e-3e72-4830-a5eb-a88d0baf6bf6","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-884921.apps.294019ed-43ef-46f4-a4ce-c5c88067cb0f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-13T21:51:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d7fe524e-3e72-4830-a5eb-a88d0baf6bf6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:55450","PortSpecifier":{"PortValue":55450}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783979493,"nanos":731499488},"http":{"id":"d7fe524e-3e72-4830-a5eb-a88d0baf6bf6","method":"GET","headers":{":authority":"e2e-shared-b-884921.apps.294019ed-43ef-46f4-a4ce-c5c88067cb0f.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T21:51:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d7fe524e-3e72-4830-a5eb-a88d0baf6bf6","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Vbrj7T2CG7MZDx6B_TdPUdFHfx5oFN2sBDx2IiJDtOyiQISVMSacYB07Rt54"} {"level":"debug","ts":"2026-07-13T21:51:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d7fe524e-3e72-4830-a5eb-a88d0baf6bf6","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-884921.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Vbrj7T2CG7MZDx6B_TdPUdFHfx5oFN2sBDx2IiJDtOyiQISVMSacYB07Rt54\"}"} {"level":"debug","ts":"2026-07-13T21:51:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d7fe524e-3e72-4830-a5eb-a88d0baf6bf6","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-884921.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}} {"level":"debug","ts":"2026-07-13T21:51:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d7fe524e-3e72-4830-a5eb-a88d0baf6bf6","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"d9c588a307ba8480921ac9347fd526993aa73c32e5e4813a434bd200d3c318e5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-884921.apps.294019ed-43ef-46f4-a4ce-c5c88067cb0f.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T21:51:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"d7fe524e-3e72-4830-a5eb-a88d0baf6bf6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"} {"level":"info","ts":"2026-07-13T21:51:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d7fe524e-3e72-4830-a5eb-a88d0baf6bf6","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}} {"level":"debug","ts":"2026-07-13T21:51:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d7fe524e-3e72-4830-a5eb-a88d0baf6bf6","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"x-ext-auth-reason":""},{"content-type":"text/plain"}]}} {"level":"info","ts":"2026-07-13T21:51:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"19401cc8-7318-49be-8f63-9008ce3e8e59","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:57726","PortSpecifier":{"PortValue":57726}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"19401cc8-7318-49be-8f63-9008ce3e8e59","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8e2974.apps.294019ed-43ef-46f4-a4ce-c5c88067cb0f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-13T21:51:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"19401cc8-7318-49be-8f63-9008ce3e8e59","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:57726","PortSpecifier":{"PortValue":57726}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783979512,"nanos":840642762},"http":{"id":"19401cc8-7318-49be-8f63-9008ce3e8e59","method":"POST","headers":{":authority":"e2e-shared-a-8e2974.apps.294019ed-43ef-46f4-a4ce-c5c88067cb0f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T21:51:52Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"19401cc8-7318-49be-8f63-9008ce3e8e59","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-13T21:51:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"19401cc8-7318-49be-8f63-9008ce3e8e59","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b62e8f90-7460-4bb9-9510-7f1180036f2d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=817b74d9-4ac4-4f4d-b17a-056132976a9e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c5c88067cb0f"]}} {"level":"debug","ts":"2026-07-13T21:51:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"19401cc8-7318-49be-8f63-9008ce3e8e59","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c5c88067cb0f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=817b74d9-4ac4-4f4d-b17a-056132976a9e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b62e8f90-7460-4bb9-9510-7f1180036f2d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"407be41904019b18b50107a0a97b06c04b484a47240e0d114cc0dd8717c86ffd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8e2974.apps.294019ed-43ef-46f4-a4ce-c5c88067cb0f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T21:51:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"19401cc8-7318-49be-8f63-9008ce3e8e59","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T21:51:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"19401cc8-7318-49be-8f63-9008ce3e8e59","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T21:51:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"19401cc8-7318-49be-8f63-9008ce3e8e59","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8e2974/auth-test-model-8e2974\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T21:51:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"19401cc8-7318-49be-8f63-9008ce3e8e59","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-13T21:51:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"19401cc8-7318-49be-8f63-9008ce3e8e59","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-13T21:51:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"19401cc8-7318-49be-8f63-9008ce3e8e59","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-13T21:51:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"19401cc8-7318-49be-8f63-9008ce3e8e59","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-13T21:51:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"19401cc8-7318-49be-8f63-9008ce3e8e59","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-13T21:51:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e52c5609-e54a-4549-85e3-2d0b03fccfb4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:53314","PortSpecifier":{"PortValue":53314}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e52c5609-e54a-4549-85e3-2d0b03fccfb4","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-884921.apps.294019ed-43ef-46f4-a4ce-c5c88067cb0f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-13T21:51:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e52c5609-e54a-4549-85e3-2d0b03fccfb4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:53314","PortSpecifier":{"PortValue":53314}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783979512,"nanos":875980965},"http":{"id":"e52c5609-e54a-4549-85e3-2d0b03fccfb4","method":"POST","headers":{":authority":"e2e-shared-b-884921.apps.294019ed-43ef-46f4-a4ce-c5c88067cb0f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T21:51:52Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e52c5609-e54a-4549-85e3-2d0b03fccfb4","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-13T21:51:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e52c5609-e54a-4549-85e3-2d0b03fccfb4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b62e8f90-7460-4bb9-9510-7f1180036f2d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=817b74d9-4ac4-4f4d-b17a-056132976a9e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c5c88067cb0f"]}} {"level":"debug","ts":"2026-07-13T21:51:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e52c5609-e54a-4549-85e3-2d0b03fccfb4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c5c88067cb0f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=817b74d9-4ac4-4f4d-b17a-056132976a9e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b62e8f90-7460-4bb9-9510-7f1180036f2d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d9c588a307ba8480921ac9347fd526993aa73c32e5e4813a434bd200d3c318e5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-884921.apps.294019ed-43ef-46f4-a4ce-c5c88067cb0f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T21:51:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e52c5609-e54a-4549-85e3-2d0b03fccfb4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T21:51:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e52c5609-e54a-4549-85e3-2d0b03fccfb4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T21:51:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e52c5609-e54a-4549-85e3-2d0b03fccfb4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-884921/auth-test-model-884921\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T21:51:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e52c5609-e54a-4549-85e3-2d0b03fccfb4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-13T21:51:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e52c5609-e54a-4549-85e3-2d0b03fccfb4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-13T21:51:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e52c5609-e54a-4549-85e3-2d0b03fccfb4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-13T21:51:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e52c5609-e54a-4549-85e3-2d0b03fccfb4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-13T21:51:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e52c5609-e54a-4549-85e3-2d0b03fccfb4","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-13T21:51:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"36cf0e79-ed44-4ce9-bc74-dc01f48abf82","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:57730","PortSpecifier":{"PortValue":57730}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"36cf0e79-ed44-4ce9-bc74-dc01f48abf82","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-8e2974.apps.294019ed-43ef-46f4-a4ce-c5c88067cb0f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-13T21:51:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"36cf0e79-ed44-4ce9-bc74-dc01f48abf82","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:57730","PortSpecifier":{"PortValue":57730}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783979512,"nanos":906388706},"http":{"id":"36cf0e79-ed44-4ce9-bc74-dc01f48abf82","method":"POST","headers":{":authority":"e2e-shared-a-8e2974.apps.294019ed-43ef-46f4-a4ce-c5c88067cb0f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T21:51:52Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"36cf0e79-ed44-4ce9-bc74-dc01f48abf82","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-13T21:51:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"36cf0e79-ed44-4ce9-bc74-dc01f48abf82","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b62e8f90-7460-4bb9-9510-7f1180036f2d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=817b74d9-4ac4-4f4d-b17a-056132976a9e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c5c88067cb0f"]}} {"level":"debug","ts":"2026-07-13T21:51:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"36cf0e79-ed44-4ce9-bc74-dc01f48abf82","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c5c88067cb0f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=817b74d9-4ac4-4f4d-b17a-056132976a9e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b62e8f90-7460-4bb9-9510-7f1180036f2d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"407be41904019b18b50107a0a97b06c04b484a47240e0d114cc0dd8717c86ffd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8e2974.apps.294019ed-43ef-46f4-a4ce-c5c88067cb0f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T21:51:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"36cf0e79-ed44-4ce9-bc74-dc01f48abf82","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T21:51:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"36cf0e79-ed44-4ce9-bc74-dc01f48abf82","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T21:51:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"36cf0e79-ed44-4ce9-bc74-dc01f48abf82","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8e2974/auth-test-model-8e2974\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T21:51:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"36cf0e79-ed44-4ce9-bc74-dc01f48abf82","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-13T21:51:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"36cf0e79-ed44-4ce9-bc74-dc01f48abf82","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-13T21:51:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"36cf0e79-ed44-4ce9-bc74-dc01f48abf82","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-13T21:51:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"36cf0e79-ed44-4ce9-bc74-dc01f48abf82","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-13T21:51:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"36cf0e79-ed44-4ce9-bc74-dc01f48abf82","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-13T21:51:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"83109ba3-6f6c-4e64-b2c1-8db145287ca6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:53318","PortSpecifier":{"PortValue":53318}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"83109ba3-6f6c-4e64-b2c1-8db145287ca6","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-884921.apps.294019ed-43ef-46f4-a4ce-c5c88067cb0f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-13T21:51:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"83109ba3-6f6c-4e64-b2c1-8db145287ca6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:53318","PortSpecifier":{"PortValue":53318}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783979512,"nanos":940011607},"http":{"id":"83109ba3-6f6c-4e64-b2c1-8db145287ca6","method":"POST","headers":{":authority":"e2e-shared-b-884921.apps.294019ed-43ef-46f4-a4ce-c5c88067cb0f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T21:51:52Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"83109ba3-6f6c-4e64-b2c1-8db145287ca6","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-13T21:51:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"83109ba3-6f6c-4e64-b2c1-8db145287ca6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b62e8f90-7460-4bb9-9510-7f1180036f2d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=817b74d9-4ac4-4f4d-b17a-056132976a9e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c5c88067cb0f"]}} {"level":"debug","ts":"2026-07-13T21:51:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"83109ba3-6f6c-4e64-b2c1-8db145287ca6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c5c88067cb0f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=817b74d9-4ac4-4f4d-b17a-056132976a9e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b62e8f90-7460-4bb9-9510-7f1180036f2d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d9c588a307ba8480921ac9347fd526993aa73c32e5e4813a434bd200d3c318e5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-884921.apps.294019ed-43ef-46f4-a4ce-c5c88067cb0f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T21:51:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"83109ba3-6f6c-4e64-b2c1-8db145287ca6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T21:51:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"83109ba3-6f6c-4e64-b2c1-8db145287ca6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T21:51:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"83109ba3-6f6c-4e64-b2c1-8db145287ca6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-884921/auth-test-model-884921\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T21:51:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"83109ba3-6f6c-4e64-b2c1-8db145287ca6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-13T21:51:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"83109ba3-6f6c-4e64-b2c1-8db145287ca6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-13T21:51:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"83109ba3-6f6c-4e64-b2c1-8db145287ca6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-13T21:51:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"83109ba3-6f6c-4e64-b2c1-8db145287ca6","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-13T21:51:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"83109ba3-6f6c-4e64-b2c1-8db145287ca6","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-13T21:52:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"999464b4-5ed8-4a5a-96e7-398fc5c5f19f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:55994","PortSpecifier":{"PortValue":55994}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"999464b4-5ed8-4a5a-96e7-398fc5c5f19f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8e2974.apps.294019ed-43ef-46f4-a4ce-c5c88067cb0f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-13T21:52:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"999464b4-5ed8-4a5a-96e7-398fc5c5f19f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:55994","PortSpecifier":{"PortValue":55994}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783979532,"nanos":28260711},"http":{"id":"999464b4-5ed8-4a5a-96e7-398fc5c5f19f","method":"POST","headers":{":authority":"e2e-shared-a-8e2974.apps.294019ed-43ef-46f4-a4ce-c5c88067cb0f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T21:52:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"999464b4-5ed8-4a5a-96e7-398fc5c5f19f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-13T21:52:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"999464b4-5ed8-4a5a-96e7-398fc5c5f19f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b62e8f90-7460-4bb9-9510-7f1180036f2d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=817b74d9-4ac4-4f4d-b17a-056132976a9e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c5c88067cb0f"]}} {"level":"debug","ts":"2026-07-13T21:52:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"999464b4-5ed8-4a5a-96e7-398fc5c5f19f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c5c88067cb0f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=817b74d9-4ac4-4f4d-b17a-056132976a9e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b62e8f90-7460-4bb9-9510-7f1180036f2d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"407be41904019b18b50107a0a97b06c04b484a47240e0d114cc0dd8717c86ffd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8e2974.apps.294019ed-43ef-46f4-a4ce-c5c88067cb0f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T21:52:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"999464b4-5ed8-4a5a-96e7-398fc5c5f19f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T21:52:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"999464b4-5ed8-4a5a-96e7-398fc5c5f19f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T21:52:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"999464b4-5ed8-4a5a-96e7-398fc5c5f19f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8e2974/auth-test-model-8e2974\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T21:52:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"999464b4-5ed8-4a5a-96e7-398fc5c5f19f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-13T21:52:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"999464b4-5ed8-4a5a-96e7-398fc5c5f19f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-13T21:52:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"999464b4-5ed8-4a5a-96e7-398fc5c5f19f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-13T21:52:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"999464b4-5ed8-4a5a-96e7-398fc5c5f19f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-13T21:52:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"999464b4-5ed8-4a5a-96e7-398fc5c5f19f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-13T21:52:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9bfc8f7e-ee6d-425e-adfc-a8d77bfef325","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:52626","PortSpecifier":{"PortValue":52626}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9bfc8f7e-ee6d-425e-adfc-a8d77bfef325","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-884921.apps.294019ed-43ef-46f4-a4ce-c5c88067cb0f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-13T21:52:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9bfc8f7e-ee6d-425e-adfc-a8d77bfef325","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:52626","PortSpecifier":{"PortValue":52626}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783979532,"nanos":60906968},"http":{"id":"9bfc8f7e-ee6d-425e-adfc-a8d77bfef325","method":"POST","headers":{":authority":"e2e-shared-b-884921.apps.294019ed-43ef-46f4-a4ce-c5c88067cb0f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T21:52:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9bfc8f7e-ee6d-425e-adfc-a8d77bfef325","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-13T21:52:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9bfc8f7e-ee6d-425e-adfc-a8d77bfef325","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b62e8f90-7460-4bb9-9510-7f1180036f2d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=817b74d9-4ac4-4f4d-b17a-056132976a9e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c5c88067cb0f"]}} {"level":"debug","ts":"2026-07-13T21:52:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9bfc8f7e-ee6d-425e-adfc-a8d77bfef325","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c5c88067cb0f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=817b74d9-4ac4-4f4d-b17a-056132976a9e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b62e8f90-7460-4bb9-9510-7f1180036f2d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d9c588a307ba8480921ac9347fd526993aa73c32e5e4813a434bd200d3c318e5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-884921.apps.294019ed-43ef-46f4-a4ce-c5c88067cb0f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T21:52:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9bfc8f7e-ee6d-425e-adfc-a8d77bfef325","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T21:52:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9bfc8f7e-ee6d-425e-adfc-a8d77bfef325","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T21:52:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9bfc8f7e-ee6d-425e-adfc-a8d77bfef325","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-884921/auth-test-model-884921\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T21:52:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9bfc8f7e-ee6d-425e-adfc-a8d77bfef325","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-13T21:52:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9bfc8f7e-ee6d-425e-adfc-a8d77bfef325","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-13T21:52:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9bfc8f7e-ee6d-425e-adfc-a8d77bfef325","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-13T21:52:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9bfc8f7e-ee6d-425e-adfc-a8d77bfef325","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-13T21:52:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9bfc8f7e-ee6d-425e-adfc-a8d77bfef325","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-13T21:52:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"79c31279-5624-4e86-b868-dc8cc29eb547","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:52628","PortSpecifier":{"PortValue":52628}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"79c31279-5624-4e86-b868-dc8cc29eb547","method":"GET","path":"/maas-api/v1/api-keys/364ec766-b4ee-4aad-87ba-909e7e4562df","host":"e2e-shared-b-884921.apps.294019ed-43ef-46f4-a4ce-c5c88067cb0f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-13T21:52:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"79c31279-5624-4e86-b868-dc8cc29eb547","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:52628","PortSpecifier":{"PortValue":52628}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783979532,"nanos":90522218},"http":{"id":"79c31279-5624-4e86-b868-dc8cc29eb547","method":"GET","headers":{":authority":"e2e-shared-b-884921.apps.294019ed-43ef-46f4-a4ce-c5c88067cb0f.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/364ec766-b4ee-4aad-87ba-909e7e4562df",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T21:52:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"79c31279-5624-4e86-b868-dc8cc29eb547","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-13T21:52:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"79c31279-5624-4e86-b868-dc8cc29eb547","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b62e8f90-7460-4bb9-9510-7f1180036f2d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=817b74d9-4ac4-4f4d-b17a-056132976a9e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c5c88067cb0f"]}} {"level":"debug","ts":"2026-07-13T21:52:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"79c31279-5624-4e86-b868-dc8cc29eb547","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c5c88067cb0f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=817b74d9-4ac4-4f4d-b17a-056132976a9e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b62e8f90-7460-4bb9-9510-7f1180036f2d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d9c588a307ba8480921ac9347fd526993aa73c32e5e4813a434bd200d3c318e5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-884921.apps.294019ed-43ef-46f4-a4ce-c5c88067cb0f.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/364ec766-b4ee-4aad-87ba-909e7e4562df",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T21:52:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"79c31279-5624-4e86-b868-dc8cc29eb547","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T21:52:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"79c31279-5624-4e86-b868-dc8cc29eb547","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T21:52:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"79c31279-5624-4e86-b868-dc8cc29eb547","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-884921/auth-test-model-884921\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T21:52:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"79c31279-5624-4e86-b868-dc8cc29eb547","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-13T21:52:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"79c31279-5624-4e86-b868-dc8cc29eb547","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-13T21:52:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"79c31279-5624-4e86-b868-dc8cc29eb547","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-13T21:52:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"79c31279-5624-4e86-b868-dc8cc29eb547","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-13T21:52:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"79c31279-5624-4e86-b868-dc8cc29eb547","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-13T21:52:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"79f4d9ed-d8a3-4b97-a3ae-944a2f564fba","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:56004","PortSpecifier":{"PortValue":56004}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"79f4d9ed-d8a3-4b97-a3ae-944a2f564fba","method":"GET","path":"/maas-api/v1/api-keys/364ec766-b4ee-4aad-87ba-909e7e4562df","host":"e2e-shared-a-8e2974.apps.294019ed-43ef-46f4-a4ce-c5c88067cb0f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-13T21:52:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"79f4d9ed-d8a3-4b97-a3ae-944a2f564fba","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:56004","PortSpecifier":{"PortValue":56004}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783979532,"nanos":121218878},"http":{"id":"79f4d9ed-d8a3-4b97-a3ae-944a2f564fba","method":"GET","headers":{":authority":"e2e-shared-a-8e2974.apps.294019ed-43ef-46f4-a4ce-c5c88067cb0f.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/364ec766-b4ee-4aad-87ba-909e7e4562df",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T21:52:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"79f4d9ed-d8a3-4b97-a3ae-944a2f564fba","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-13T21:52:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"79f4d9ed-d8a3-4b97-a3ae-944a2f564fba","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b62e8f90-7460-4bb9-9510-7f1180036f2d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=817b74d9-4ac4-4f4d-b17a-056132976a9e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c5c88067cb0f"]}} {"level":"debug","ts":"2026-07-13T21:52:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"79f4d9ed-d8a3-4b97-a3ae-944a2f564fba","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c5c88067cb0f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=817b74d9-4ac4-4f4d-b17a-056132976a9e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b62e8f90-7460-4bb9-9510-7f1180036f2d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"407be41904019b18b50107a0a97b06c04b484a47240e0d114cc0dd8717c86ffd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8e2974.apps.294019ed-43ef-46f4-a4ce-c5c88067cb0f.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/364ec766-b4ee-4aad-87ba-909e7e4562df",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T21:52:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"79f4d9ed-d8a3-4b97-a3ae-944a2f564fba","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T21:52:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"79f4d9ed-d8a3-4b97-a3ae-944a2f564fba","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T21:52:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"79f4d9ed-d8a3-4b97-a3ae-944a2f564fba","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8e2974/auth-test-model-8e2974\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T21:52:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"79f4d9ed-d8a3-4b97-a3ae-944a2f564fba","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-13T21:52:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"79f4d9ed-d8a3-4b97-a3ae-944a2f564fba","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-13T21:52:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"79f4d9ed-d8a3-4b97-a3ae-944a2f564fba","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-13T21:52:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"79f4d9ed-d8a3-4b97-a3ae-944a2f564fba","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-13T21:52:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"79f4d9ed-d8a3-4b97-a3ae-944a2f564fba","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-13T21:52:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4930c4a4-5e6d-410d-b3cb-77db35e7c78d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:41798","PortSpecifier":{"PortValue":41798}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4930c4a4-5e6d-410d-b3cb-77db35e7c78d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8e2974.apps.294019ed-43ef-46f4-a4ce-c5c88067cb0f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-13T21:52:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4930c4a4-5e6d-410d-b3cb-77db35e7c78d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:41798","PortSpecifier":{"PortValue":41798}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783979555,"nanos":440791077},"http":{"id":"4930c4a4-5e6d-410d-b3cb-77db35e7c78d","method":"POST","headers":{":authority":"e2e-shared-a-8e2974.apps.294019ed-43ef-46f4-a4ce-c5c88067cb0f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T21:52:35Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4930c4a4-5e6d-410d-b3cb-77db35e7c78d","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-13T21:52:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4930c4a4-5e6d-410d-b3cb-77db35e7c78d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b62e8f90-7460-4bb9-9510-7f1180036f2d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=817b74d9-4ac4-4f4d-b17a-056132976a9e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c5c88067cb0f"]}} {"level":"debug","ts":"2026-07-13T21:52:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4930c4a4-5e6d-410d-b3cb-77db35e7c78d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c5c88067cb0f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=817b74d9-4ac4-4f4d-b17a-056132976a9e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b62e8f90-7460-4bb9-9510-7f1180036f2d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"407be41904019b18b50107a0a97b06c04b484a47240e0d114cc0dd8717c86ffd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8e2974.apps.294019ed-43ef-46f4-a4ce-c5c88067cb0f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T21:52:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4930c4a4-5e6d-410d-b3cb-77db35e7c78d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T21:52:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4930c4a4-5e6d-410d-b3cb-77db35e7c78d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T21:52:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4930c4a4-5e6d-410d-b3cb-77db35e7c78d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8e2974/auth-test-model-8e2974\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T21:52:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4930c4a4-5e6d-410d-b3cb-77db35e7c78d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-13T21:52:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4930c4a4-5e6d-410d-b3cb-77db35e7c78d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-13T21:52:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4930c4a4-5e6d-410d-b3cb-77db35e7c78d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-13T21:52:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4930c4a4-5e6d-410d-b3cb-77db35e7c78d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-13T21:52:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4930c4a4-5e6d-410d-b3cb-77db35e7c78d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-13T21:52:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fee4fe28-a654-4707-ab78-47c5e7f889ab","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:37004","PortSpecifier":{"PortValue":37004}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fee4fe28-a654-4707-ab78-47c5e7f889ab","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-884921.apps.294019ed-43ef-46f4-a4ce-c5c88067cb0f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-13T21:52:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fee4fe28-a654-4707-ab78-47c5e7f889ab","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:37004","PortSpecifier":{"PortValue":37004}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783979555,"nanos":475257736},"http":{"id":"fee4fe28-a654-4707-ab78-47c5e7f889ab","method":"POST","headers":{":authority":"e2e-shared-b-884921.apps.294019ed-43ef-46f4-a4ce-c5c88067cb0f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T21:52:35Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fee4fe28-a654-4707-ab78-47c5e7f889ab","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-13T21:52:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fee4fe28-a654-4707-ab78-47c5e7f889ab","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b62e8f90-7460-4bb9-9510-7f1180036f2d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=817b74d9-4ac4-4f4d-b17a-056132976a9e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c5c88067cb0f"]}} {"level":"debug","ts":"2026-07-13T21:52:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fee4fe28-a654-4707-ab78-47c5e7f889ab","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c5c88067cb0f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=817b74d9-4ac4-4f4d-b17a-056132976a9e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b62e8f90-7460-4bb9-9510-7f1180036f2d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d9c588a307ba8480921ac9347fd526993aa73c32e5e4813a434bd200d3c318e5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-884921.apps.294019ed-43ef-46f4-a4ce-c5c88067cb0f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T21:52:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fee4fe28-a654-4707-ab78-47c5e7f889ab","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T21:52:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fee4fe28-a654-4707-ab78-47c5e7f889ab","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T21:52:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fee4fe28-a654-4707-ab78-47c5e7f889ab","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-884921/auth-test-model-884921\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T21:52:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fee4fe28-a654-4707-ab78-47c5e7f889ab","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-13T21:52:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fee4fe28-a654-4707-ab78-47c5e7f889ab","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-13T21:52:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fee4fe28-a654-4707-ab78-47c5e7f889ab","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-13T21:52:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fee4fe28-a654-4707-ab78-47c5e7f889ab","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-13T21:52:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fee4fe28-a654-4707-ab78-47c5e7f889ab","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-13T21:52:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ebc344da-b52d-42ed-a3d9-339ec02835be","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:41800","PortSpecifier":{"PortValue":41800}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ebc344da-b52d-42ed-a3d9-339ec02835be","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-8e2974.apps.294019ed-43ef-46f4-a4ce-c5c88067cb0f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-13T21:52:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ebc344da-b52d-42ed-a3d9-339ec02835be","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:41800","PortSpecifier":{"PortValue":41800}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783979555,"nanos":510009531},"http":{"id":"ebc344da-b52d-42ed-a3d9-339ec02835be","method":"POST","headers":{":authority":"e2e-shared-a-8e2974.apps.294019ed-43ef-46f4-a4ce-c5c88067cb0f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T21:52:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ebc344da-b52d-42ed-a3d9-339ec02835be","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1KWzMd2vpdiBB7bof_I6EYoHu7vIdlv7hZYYdtbidQcYk7jHyuFa4PibK1LJL"} {"level":"debug","ts":"2026-07-13T21:52:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ebc344da-b52d-42ed-a3d9-339ec02835be","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8e2974.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1KWzMd2vpdiBB7bof_I6EYoHu7vIdlv7hZYYdtbidQcYk7jHyuFa4PibK1LJL\"}"} {"level":"debug","ts":"2026-07-13T21:52:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ebc344da-b52d-42ed-a3d9-339ec02835be","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8e2974.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6dafa409-95cf-43e4-bd2b-a930d6d9ed3a","keyName":"e2e-auth-iso-a-6cab36","subscription":"e2e-auth-iso-9a2572","tenant":"e2e-shared-a-8e2974","userId":"6dafa409-95cf-43e4-bd2b-a930d6d9ed3a","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-13T21:52:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ebc344da-b52d-42ed-a3d9-339ec02835be","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T21:52:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ebc344da-b52d-42ed-a3d9-339ec02835be","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T21:52:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ebc344da-b52d-42ed-a3d9-339ec02835be","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T21:52:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ebc344da-b52d-42ed-a3d9-339ec02835be","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8e2974/auth-test-model-8e2974\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T21:52:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ebc344da-b52d-42ed-a3d9-339ec02835be","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-13T21:52:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ebc344da-b52d-42ed-a3d9-339ec02835be","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-9a2572"} {"level":"debug","ts":"2026-07-13T21:52:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ebc344da-b52d-42ed-a3d9-339ec02835be","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-13T21:52:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ebc344da-b52d-42ed-a3d9-339ec02835be","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-13T21:52:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ebc344da-b52d-42ed-a3d9-339ec02835be","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-13T21:52:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ebc344da-b52d-42ed-a3d9-339ec02835be","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-13T21:52:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bc15ad6df7e5f8ea144e666e542f150898a07c425fd64d7c00d4f6c31d178607"} {"level":"info","ts":"2026-07-13T21:52:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1380d819ef47cbd38344f96b6f94299ab9d515207ef645e8b52d816a8d5ca366"} {"level":"info","ts":"2026-07-13T21:52:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7973a4655bccec67e29f4275c106844c57f0f69669c472add0f706aea165ccce"} {"level":"info","ts":"2026-07-13T21:52:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cb0948084be169d330a9f585d552f52dff34c865db103cd6a1c8881adf514d72"} {"level":"info","ts":"2026-07-13T21:52:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c48641a8309e2e67a05d45d2a48542600e15944ac283cdd69ece4f2771f62d89"} {"level":"info","ts":"2026-07-13T21:52:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/af242c1f48ca43c7b78f87346345e6dd43ccc306044b05c8a5e3361f168d9a36"} {"level":"info","ts":"2026-07-13T21:52:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6b32773bff0f69c5e5c6e43d3bb05642fd82ed21f8d124b9188ff0ec390af6c3"} {"level":"info","ts":"2026-07-13T21:52:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a6cb0dc2fb1a7c59ea453750647ac7970008e518de337e0364d7704fda2e3713"} {"level":"info","ts":"2026-07-13T21:52:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/910f30437f6c7c740f014240ccc8f04a710d14a0fff3f59c4d8ecf2bd99e6e96"} {"level":"info","ts":"2026-07-13T21:52:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5b19302e3db6a54345decbcb64219e999378e81eaac4ab90f6f63fd090ec62ac"} {"level":"info","ts":"2026-07-13T21:52:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6a8b26846453728812a63b057ea7016489c40a68e22081c536b8c9e2ccaf6543"} {"level":"info","ts":"2026-07-13T21:52:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a2a85e46c0361e26155e59d2ebd48213c32905c85b99e9d87b211bfe34b87001"} {"level":"info","ts":"2026-07-13T21:52:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/92031e00503eab985361a7834e60e5df4057e3f88328ee011021bd39dfd2cc0e"} {"level":"info","ts":"2026-07-13T21:52:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0a7bdbd6781653a7f975e294cb740f06ead39562a5d603a71f66539255b682c8"} {"level":"info","ts":"2026-07-13T21:52:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aa5693f14d78b682c853571e035eb193f228e624e2bf1f63f4343f843df96176"} {"level":"info","ts":"2026-07-13T21:52:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1f8370eaa3700267d4882607273cc222798b24adfdd353fae40b812e604f94a5"} {"level":"debug","ts":"2026-07-13T21:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ea8a35b2958daced20a2cd49091c403ab6f7c6af2c181fe2c7fe5b9059cad38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:52:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:52:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ea8a35b2958daced20a2cd49091c403ab6f7c6af2c181fe2c7fe5b9059cad38","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ea8a35b2958daced20a2cd49091c403ab6f7c6af2c181fe2c7fe5b9059cad38","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ea8a35b2958daced20a2cd49091c403ab6f7c6af2c181fe2c7fe5b9059cad38","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ea8a35b2958daced20a2cd49091c403ab6f7c6af2c181fe2c7fe5b9059cad38"} {"level":"debug","ts":"2026-07-13T21:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ea8a35b2958daced20a2cd49091c403ab6f7c6af2c181fe2c7fe5b9059cad38","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ea8a35b2958daced20a2cd49091c403ab6f7c6af2c181fe2c7fe5b9059cad38"} {"level":"debug","ts":"2026-07-13T21:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ea8a35b2958daced20a2cd49091c403ab6f7c6af2c181fe2c7fe5b9059cad38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:52:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:52:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0ea8a35b2958daced20a2cd49091c403ab6f7c6af2c181fe2c7fe5b9059cad38"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ea8a35b2958daced20a2cd49091c403ab6f7c6af2c181fe2c7fe5b9059cad38","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ea8a35b2958daced20a2cd49091c403ab6f7c6af2c181fe2c7fe5b9059cad38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:52:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:52:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ea8a35b2958daced20a2cd49091c403ab6f7c6af2c181fe2c7fe5b9059cad38","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ea8a35b2958daced20a2cd49091c403ab6f7c6af2c181fe2c7fe5b9059cad38","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ea8a35b2958daced20a2cd49091c403ab6f7c6af2c181fe2c7fe5b9059cad38","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ea8a35b2958daced20a2cd49091c403ab6f7c6af2c181fe2c7fe5b9059cad38"} {"level":"debug","ts":"2026-07-13T21:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ea8a35b2958daced20a2cd49091c403ab6f7c6af2c181fe2c7fe5b9059cad38","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ea8a35b2958daced20a2cd49091c403ab6f7c6af2c181fe2c7fe5b9059cad38"} {"level":"debug","ts":"2026-07-13T21:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ea8a35b2958daced20a2cd49091c403ab6f7c6af2c181fe2c7fe5b9059cad38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:52:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:52:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0ea8a35b2958daced20a2cd49091c403ab6f7c6af2c181fe2c7fe5b9059cad38"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ea8a35b2958daced20a2cd49091c403ab6f7c6af2c181fe2c7fe5b9059cad38","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ea8a35b2958daced20a2cd49091c403ab6f7c6af2c181fe2c7fe5b9059cad38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:52:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:52:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ea8a35b2958daced20a2cd49091c403ab6f7c6af2c181fe2c7fe5b9059cad38","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ea8a35b2958daced20a2cd49091c403ab6f7c6af2c181fe2c7fe5b9059cad38","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ea8a35b2958daced20a2cd49091c403ab6f7c6af2c181fe2c7fe5b9059cad38","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ea8a35b2958daced20a2cd49091c403ab6f7c6af2c181fe2c7fe5b9059cad38"} {"level":"debug","ts":"2026-07-13T21:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ea8a35b2958daced20a2cd49091c403ab6f7c6af2c181fe2c7fe5b9059cad38","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ea8a35b2958daced20a2cd49091c403ab6f7c6af2c181fe2c7fe5b9059cad38"} {"level":"debug","ts":"2026-07-13T21:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ea8a35b2958daced20a2cd49091c403ab6f7c6af2c181fe2c7fe5b9059cad38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:52:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:52:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0ea8a35b2958daced20a2cd49091c403ab6f7c6af2c181fe2c7fe5b9059cad38"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ea8a35b2958daced20a2cd49091c403ab6f7c6af2c181fe2c7fe5b9059cad38","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ea8a35b2958daced20a2cd49091c403ab6f7c6af2c181fe2c7fe5b9059cad38","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b6e9b069b073ae2cdcfdbc852687bbedc0d9fbc0f7942209ac98d36ebfa4ecf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:52:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:52:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b6e9b069b073ae2cdcfdbc852687bbedc0d9fbc0f7942209ac98d36ebfa4ecf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b6e9b069b073ae2cdcfdbc852687bbedc0d9fbc0f7942209ac98d36ebfa4ecf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ea8a35b2958daced20a2cd49091c403ab6f7c6af2c181fe2c7fe5b9059cad38"} {"level":"debug","ts":"2026-07-13T21:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b6e9b069b073ae2cdcfdbc852687bbedc0d9fbc0f7942209ac98d36ebfa4ecf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:52:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:52:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b6e9b069b073ae2cdcfdbc852687bbedc0d9fbc0f7942209ac98d36ebfa4ecf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b6e9b069b073ae2cdcfdbc852687bbedc0d9fbc0f7942209ac98d36ebfa4ecf"} {"level":"debug","ts":"2026-07-13T21:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b6e9b069b073ae2cdcfdbc852687bbedc0d9fbc0f7942209ac98d36ebfa4ecf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b6e9b069b073ae2cdcfdbc852687bbedc0d9fbc0f7942209ac98d36ebfa4ecf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b6e9b069b073ae2cdcfdbc852687bbedc0d9fbc0f7942209ac98d36ebfa4ecf"} {"level":"debug","ts":"2026-07-13T21:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"47e7646c076c7694c4e7db8d875ffa4d02e571afa2da9a2e9b12da743f6cfb16","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:52:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:52:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"47e7646c076c7694c4e7db8d875ffa4d02e571afa2da9a2e9b12da743f6cfb16","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"47e7646c076c7694c4e7db8d875ffa4d02e571afa2da9a2e9b12da743f6cfb16","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"47e7646c076c7694c4e7db8d875ffa4d02e571afa2da9a2e9b12da743f6cfb16","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47e7646c076c7694c4e7db8d875ffa4d02e571afa2da9a2e9b12da743f6cfb16"} {"level":"debug","ts":"2026-07-13T21:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b6e9b069b073ae2cdcfdbc852687bbedc0d9fbc0f7942209ac98d36ebfa4ecf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:52:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:52:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3b6e9b069b073ae2cdcfdbc852687bbedc0d9fbc0f7942209ac98d36ebfa4ecf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47e7646c076c7694c4e7db8d875ffa4d02e571afa2da9a2e9b12da743f6cfb16"} {"level":"info","ts":"2026-07-13T21:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b6e9b069b073ae2cdcfdbc852687bbedc0d9fbc0f7942209ac98d36ebfa4ecf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"47e7646c076c7694c4e7db8d875ffa4d02e571afa2da9a2e9b12da743f6cfb16","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:52:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:52:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["47e7646c076c7694c4e7db8d875ffa4d02e571afa2da9a2e9b12da743f6cfb16"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"47e7646c076c7694c4e7db8d875ffa4d02e571afa2da9a2e9b12da743f6cfb16","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b6e9b069b073ae2cdcfdbc852687bbedc0d9fbc0f7942209ac98d36ebfa4ecf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:52:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:52:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b6e9b069b073ae2cdcfdbc852687bbedc0d9fbc0f7942209ac98d36ebfa4ecf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"47e7646c076c7694c4e7db8d875ffa4d02e571afa2da9a2e9b12da743f6cfb16","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b6e9b069b073ae2cdcfdbc852687bbedc0d9fbc0f7942209ac98d36ebfa4ecf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b6e9b069b073ae2cdcfdbc852687bbedc0d9fbc0f7942209ac98d36ebfa4ecf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b6e9b069b073ae2cdcfdbc852687bbedc0d9fbc0f7942209ac98d36ebfa4ecf"} {"level":"debug","ts":"2026-07-13T21:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b6e9b069b073ae2cdcfdbc852687bbedc0d9fbc0f7942209ac98d36ebfa4ecf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:52:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:52:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3b6e9b069b073ae2cdcfdbc852687bbedc0d9fbc0f7942209ac98d36ebfa4ecf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47e7646c076c7694c4e7db8d875ffa4d02e571afa2da9a2e9b12da743f6cfb16"} {"level":"info","ts":"2026-07-13T21:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b6e9b069b073ae2cdcfdbc852687bbedc0d9fbc0f7942209ac98d36ebfa4ecf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b6e9b069b073ae2cdcfdbc852687bbedc0d9fbc0f7942209ac98d36ebfa4ecf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:52:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:52:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b6e9b069b073ae2cdcfdbc852687bbedc0d9fbc0f7942209ac98d36ebfa4ecf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b6e9b069b073ae2cdcfdbc852687bbedc0d9fbc0f7942209ac98d36ebfa4ecf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b6e9b069b073ae2cdcfdbc852687bbedc0d9fbc0f7942209ac98d36ebfa4ecf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b6e9b069b073ae2cdcfdbc852687bbedc0d9fbc0f7942209ac98d36ebfa4ecf"} {"level":"debug","ts":"2026-07-13T21:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b6e9b069b073ae2cdcfdbc852687bbedc0d9fbc0f7942209ac98d36ebfa4ecf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b6e9b069b073ae2cdcfdbc852687bbedc0d9fbc0f7942209ac98d36ebfa4ecf"} {"level":"debug","ts":"2026-07-13T21:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b6e9b069b073ae2cdcfdbc852687bbedc0d9fbc0f7942209ac98d36ebfa4ecf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:52:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:52:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3b6e9b069b073ae2cdcfdbc852687bbedc0d9fbc0f7942209ac98d36ebfa4ecf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b6e9b069b073ae2cdcfdbc852687bbedc0d9fbc0f7942209ac98d36ebfa4ecf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b6e9b069b073ae2cdcfdbc852687bbedc0d9fbc0f7942209ac98d36ebfa4ecf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b6e9b069b073ae2cdcfdbc852687bbedc0d9fbc0f7942209ac98d36ebfa4ecf"} {"level":"debug","ts":"2026-07-13T21:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4f6458d5e2caf0ecc3f52f1bd94b2e403d1ca7fe25380d8010b8ee308b062df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:52:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:52:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4f6458d5e2caf0ecc3f52f1bd94b2e403d1ca7fe25380d8010b8ee308b062df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4f6458d5e2caf0ecc3f52f1bd94b2e403d1ca7fe25380d8010b8ee308b062df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:52:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:52:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4f6458d5e2caf0ecc3f52f1bd94b2e403d1ca7fe25380d8010b8ee308b062df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4f6458d5e2caf0ecc3f52f1bd94b2e403d1ca7fe25380d8010b8ee308b062df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:52:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:52:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4f6458d5e2caf0ecc3f52f1bd94b2e403d1ca7fe25380d8010b8ee308b062df"} {"level":"error","ts":"2026-07-13T21:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d4f6458d5e2caf0ecc3f52f1bd94b2e403d1ca7fe25380d8010b8ee308b062df","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d4f6458d5e2caf0ecc3f52f1bd94b2e403d1ca7fe25380d8010b8ee308b062df\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-13T21:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4f6458d5e2caf0ecc3f52f1bd94b2e403d1ca7fe25380d8010b8ee308b062df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4f6458d5e2caf0ecc3f52f1bd94b2e403d1ca7fe25380d8010b8ee308b062df","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4f6458d5e2caf0ecc3f52f1bd94b2e403d1ca7fe25380d8010b8ee308b062df"} {"level":"info","ts":"2026-07-13T21:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4f6458d5e2caf0ecc3f52f1bd94b2e403d1ca7fe25380d8010b8ee308b062df"} {"level":"debug","ts":"2026-07-13T21:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4f6458d5e2caf0ecc3f52f1bd94b2e403d1ca7fe25380d8010b8ee308b062df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:52:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:52:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d4f6458d5e2caf0ecc3f52f1bd94b2e403d1ca7fe25380d8010b8ee308b062df"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4f6458d5e2caf0ecc3f52f1bd94b2e403d1ca7fe25380d8010b8ee308b062df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4f6458d5e2caf0ecc3f52f1bd94b2e403d1ca7fe25380d8010b8ee308b062df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:52:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:52:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4f6458d5e2caf0ecc3f52f1bd94b2e403d1ca7fe25380d8010b8ee308b062df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4f6458d5e2caf0ecc3f52f1bd94b2e403d1ca7fe25380d8010b8ee308b062df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4f6458d5e2caf0ecc3f52f1bd94b2e403d1ca7fe25380d8010b8ee308b062df","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4f6458d5e2caf0ecc3f52f1bd94b2e403d1ca7fe25380d8010b8ee308b062df"} {"level":"debug","ts":"2026-07-13T21:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4f6458d5e2caf0ecc3f52f1bd94b2e403d1ca7fe25380d8010b8ee308b062df","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4f6458d5e2caf0ecc3f52f1bd94b2e403d1ca7fe25380d8010b8ee308b062df"} {"level":"debug","ts":"2026-07-13T21:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22b687a2f380d2ebc36c69c1053b5e07ad4b4e1adc5bbc9650791ad0ad92148f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:52:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:52:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22b687a2f380d2ebc36c69c1053b5e07ad4b4e1adc5bbc9650791ad0ad92148f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4f6458d5e2caf0ecc3f52f1bd94b2e403d1ca7fe25380d8010b8ee308b062df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:52:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:52:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d4f6458d5e2caf0ecc3f52f1bd94b2e403d1ca7fe25380d8010b8ee308b062df"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4f6458d5e2caf0ecc3f52f1bd94b2e403d1ca7fe25380d8010b8ee308b062df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22b687a2f380d2ebc36c69c1053b5e07ad4b4e1adc5bbc9650791ad0ad92148f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4f6458d5e2caf0ecc3f52f1bd94b2e403d1ca7fe25380d8010b8ee308b062df","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22b687a2f380d2ebc36c69c1053b5e07ad4b4e1adc5bbc9650791ad0ad92148f"} {"level":"debug","ts":"2026-07-13T21:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22b687a2f380d2ebc36c69c1053b5e07ad4b4e1adc5bbc9650791ad0ad92148f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:52:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:52:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["22b687a2f380d2ebc36c69c1053b5e07ad4b4e1adc5bbc9650791ad0ad92148f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22b687a2f380d2ebc36c69c1053b5e07ad4b4e1adc5bbc9650791ad0ad92148f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22b687a2f380d2ebc36c69c1053b5e07ad4b4e1adc5bbc9650791ad0ad92148f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4f6458d5e2caf0ecc3f52f1bd94b2e403d1ca7fe25380d8010b8ee308b062df"} {"level":"debug","ts":"2026-07-13T21:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab7bdc69acfc5a7370d97bc8ca70a8e9f5dd3911ac9e3036fa25432ed6cce4e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:52:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:52:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22b687a2f380d2ebc36c69c1053b5e07ad4b4e1adc5bbc9650791ad0ad92148f"} {"level":"info","ts":"2026-07-13T21:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab7bdc69acfc5a7370d97bc8ca70a8e9f5dd3911ac9e3036fa25432ed6cce4e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab7bdc69acfc5a7370d97bc8ca70a8e9f5dd3911ac9e3036fa25432ed6cce4e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:52:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:52:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab7bdc69acfc5a7370d97bc8ca70a8e9f5dd3911ac9e3036fa25432ed6cce4e0"} {"level":"info","ts":"2026-07-13T21:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab7bdc69acfc5a7370d97bc8ca70a8e9f5dd3911ac9e3036fa25432ed6cce4e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab7bdc69acfc5a7370d97bc8ca70a8e9f5dd3911ac9e3036fa25432ed6cce4e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:52:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:52:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-13T21:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ab7bdc69acfc5a7370d97bc8ca70a8e9f5dd3911ac9e3036fa25432ed6cce4e0","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ab7bdc69acfc5a7370d97bc8ca70a8e9f5dd3911ac9e3036fa25432ed6cce4e0\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-13T21:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab7bdc69acfc5a7370d97bc8ca70a8e9f5dd3911ac9e3036fa25432ed6cce4e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab7bdc69acfc5a7370d97bc8ca70a8e9f5dd3911ac9e3036fa25432ed6cce4e0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab7bdc69acfc5a7370d97bc8ca70a8e9f5dd3911ac9e3036fa25432ed6cce4e0"} {"level":"info","ts":"2026-07-13T21:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab7bdc69acfc5a7370d97bc8ca70a8e9f5dd3911ac9e3036fa25432ed6cce4e0"} {"level":"debug","ts":"2026-07-13T21:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b6277fced272155a7e28bfc61508ab08581d16a9613c1ca3776a7223a860b1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:52:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:52:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b6277fced272155a7e28bfc61508ab08581d16a9613c1ca3776a7223a860b1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b6277fced272155a7e28bfc61508ab08581d16a9613c1ca3776a7223a860b1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b6277fced272155a7e28bfc61508ab08581d16a9613c1ca3776a7223a860b1a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b6277fced272155a7e28bfc61508ab08581d16a9613c1ca3776a7223a860b1a"} {"level":"debug","ts":"2026-07-13T21:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab7bdc69acfc5a7370d97bc8ca70a8e9f5dd3911ac9e3036fa25432ed6cce4e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:52:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:52:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ab7bdc69acfc5a7370d97bc8ca70a8e9f5dd3911ac9e3036fa25432ed6cce4e0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab7bdc69acfc5a7370d97bc8ca70a8e9f5dd3911ac9e3036fa25432ed6cce4e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b6277fced272155a7e28bfc61508ab08581d16a9613c1ca3776a7223a860b1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab7bdc69acfc5a7370d97bc8ca70a8e9f5dd3911ac9e3036fa25432ed6cce4e0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b6277fced272155a7e28bfc61508ab08581d16a9613c1ca3776a7223a860b1a"} {"level":"info","ts":"2026-07-13T21:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab7bdc69acfc5a7370d97bc8ca70a8e9f5dd3911ac9e3036fa25432ed6cce4e0"} {"level":"debug","ts":"2026-07-13T21:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b6277fced272155a7e28bfc61508ab08581d16a9613c1ca3776a7223a860b1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:52:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:52:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5b6277fced272155a7e28bfc61508ab08581d16a9613c1ca3776a7223a860b1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b6277fced272155a7e28bfc61508ab08581d16a9613c1ca3776a7223a860b1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b6277fced272155a7e28bfc61508ab08581d16a9613c1ca3776a7223a860b1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61ed73b34e7c57a67f5fb31d349dde814be40d691f9d38503e58f2527352ca5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:52:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:52:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61ed73b34e7c57a67f5fb31d349dde814be40d691f9d38503e58f2527352ca5a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61ed73b34e7c57a67f5fb31d349dde814be40d691f9d38503e58f2527352ca5a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61ed73b34e7c57a67f5fb31d349dde814be40d691f9d38503e58f2527352ca5a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b6277fced272155a7e28bfc61508ab08581d16a9613c1ca3776a7223a860b1a"} {"level":"debug","ts":"2026-07-13T21:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61ed73b34e7c57a67f5fb31d349dde814be40d691f9d38503e58f2527352ca5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:52:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:52:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61ed73b34e7c57a67f5fb31d349dde814be40d691f9d38503e58f2527352ca5a"} {"level":"info","ts":"2026-07-13T21:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61ed73b34e7c57a67f5fb31d349dde814be40d691f9d38503e58f2527352ca5a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61ed73b34e7c57a67f5fb31d349dde814be40d691f9d38503e58f2527352ca5a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61ed73b34e7c57a67f5fb31d349dde814be40d691f9d38503e58f2527352ca5a"} {"level":"debug","ts":"2026-07-13T21:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61ed73b34e7c57a67f5fb31d349dde814be40d691f9d38503e58f2527352ca5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:52:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:52:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["61ed73b34e7c57a67f5fb31d349dde814be40d691f9d38503e58f2527352ca5a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61ed73b34e7c57a67f5fb31d349dde814be40d691f9d38503e58f2527352ca5a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61ed73b34e7c57a67f5fb31d349dde814be40d691f9d38503e58f2527352ca5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:52:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:52:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61ed73b34e7c57a67f5fb31d349dde814be40d691f9d38503e58f2527352ca5a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61ed73b34e7c57a67f5fb31d349dde814be40d691f9d38503e58f2527352ca5a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61ed73b34e7c57a67f5fb31d349dde814be40d691f9d38503e58f2527352ca5a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61ed73b34e7c57a67f5fb31d349dde814be40d691f9d38503e58f2527352ca5a"} {"level":"debug","ts":"2026-07-13T21:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61ed73b34e7c57a67f5fb31d349dde814be40d691f9d38503e58f2527352ca5a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61ed73b34e7c57a67f5fb31d349dde814be40d691f9d38503e58f2527352ca5a"} {"level":"debug","ts":"2026-07-13T21:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61ed73b34e7c57a67f5fb31d349dde814be40d691f9d38503e58f2527352ca5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:52:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:52:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["61ed73b34e7c57a67f5fb31d349dde814be40d691f9d38503e58f2527352ca5a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61ed73b34e7c57a67f5fb31d349dde814be40d691f9d38503e58f2527352ca5a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61ed73b34e7c57a67f5fb31d349dde814be40d691f9d38503e58f2527352ca5a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61ed73b34e7c57a67f5fb31d349dde814be40d691f9d38503e58f2527352ca5a"} {"level":"debug","ts":"2026-07-13T21:53:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e72278d48292ebfc0f57d47ff124132bd3775dfd9ac3186d4226e107ee2746b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:53:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:53:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:53:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e72278d48292ebfc0f57d47ff124132bd3775dfd9ac3186d4226e107ee2746b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e72278d48292ebfc0f57d47ff124132bd3775dfd9ac3186d4226e107ee2746b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e72278d48292ebfc0f57d47ff124132bd3775dfd9ac3186d4226e107ee2746b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:53:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e72278d48292ebfc0f57d47ff124132bd3775dfd9ac3186d4226e107ee2746b"} {"level":"debug","ts":"2026-07-13T21:53:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e72278d48292ebfc0f57d47ff124132bd3775dfd9ac3186d4226e107ee2746b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:53:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e72278d48292ebfc0f57d47ff124132bd3775dfd9ac3186d4226e107ee2746b"} {"level":"debug","ts":"2026-07-13T21:53:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e72278d48292ebfc0f57d47ff124132bd3775dfd9ac3186d4226e107ee2746b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:53:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:53:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8e72278d48292ebfc0f57d47ff124132bd3775dfd9ac3186d4226e107ee2746b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e72278d48292ebfc0f57d47ff124132bd3775dfd9ac3186d4226e107ee2746b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e72278d48292ebfc0f57d47ff124132bd3775dfd9ac3186d4226e107ee2746b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63639f35ed5f0c6b5a99160b15958dd5303d096887d2661525b6f5527881628f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:53:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:53:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63639f35ed5f0c6b5a99160b15958dd5303d096887d2661525b6f5527881628f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"692679ac61ccbbc85e578926f0754c975bcc0a0f3092f80590de82a921a919d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:53:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:53:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e72278d48292ebfc0f57d47ff124132bd3775dfd9ac3186d4226e107ee2746b"} {"level":"info","ts":"2026-07-13T21:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"692679ac61ccbbc85e578926f0754c975bcc0a0f3092f80590de82a921a919d2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63639f35ed5f0c6b5a99160b15958dd5303d096887d2661525b6f5527881628f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:53:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:53:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63639f35ed5f0c6b5a99160b15958dd5303d096887d2661525b6f5527881628f"} {"level":"info","ts":"2026-07-13T21:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63639f35ed5f0c6b5a99160b15958dd5303d096887d2661525b6f5527881628f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"692679ac61ccbbc85e578926f0754c975bcc0a0f3092f80590de82a921a919d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:53:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:53:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"692679ac61ccbbc85e578926f0754c975bcc0a0f3092f80590de82a921a919d2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63639f35ed5f0c6b5a99160b15958dd5303d096887d2661525b6f5527881628f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:53:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:53:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63639f35ed5f0c6b5a99160b15958dd5303d096887d2661525b6f5527881628f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/692679ac61ccbbc85e578926f0754c975bcc0a0f3092f80590de82a921a919d2"} {"level":"info","ts":"2026-07-13T21:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63639f35ed5f0c6b5a99160b15958dd5303d096887d2661525b6f5527881628f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"692679ac61ccbbc85e578926f0754c975bcc0a0f3092f80590de82a921a919d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:53:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:53:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["692679ac61ccbbc85e578926f0754c975bcc0a0f3092f80590de82a921a919d2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"692679ac61ccbbc85e578926f0754c975bcc0a0f3092f80590de82a921a919d2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63639f35ed5f0c6b5a99160b15958dd5303d096887d2661525b6f5527881628f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:53:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:53:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63639f35ed5f0c6b5a99160b15958dd5303d096887d2661525b6f5527881628f"} {"level":"info","ts":"2026-07-13T21:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63639f35ed5f0c6b5a99160b15958dd5303d096887d2661525b6f5527881628f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"692679ac61ccbbc85e578926f0754c975bcc0a0f3092f80590de82a921a919d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:53:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:53:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"692679ac61ccbbc85e578926f0754c975bcc0a0f3092f80590de82a921a919d2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63639f35ed5f0c6b5a99160b15958dd5303d096887d2661525b6f5527881628f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:53:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:53:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63639f35ed5f0c6b5a99160b15958dd5303d096887d2661525b6f5527881628f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/692679ac61ccbbc85e578926f0754c975bcc0a0f3092f80590de82a921a919d2"} {"level":"info","ts":"2026-07-13T21:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63639f35ed5f0c6b5a99160b15958dd5303d096887d2661525b6f5527881628f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"692679ac61ccbbc85e578926f0754c975bcc0a0f3092f80590de82a921a919d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:53:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:53:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["692679ac61ccbbc85e578926f0754c975bcc0a0f3092f80590de82a921a919d2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63639f35ed5f0c6b5a99160b15958dd5303d096887d2661525b6f5527881628f"} {"level":"info","ts":"2026-07-13T21:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"692679ac61ccbbc85e578926f0754c975bcc0a0f3092f80590de82a921a919d2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52ef29ba1663c3289d4db6eb0264b254ec96400763b0f2a81667521515c6c44b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:53:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:53:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52ef29ba1663c3289d4db6eb0264b254ec96400763b0f2a81667521515c6c44b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63639f35ed5f0c6b5a99160b15958dd5303d096887d2661525b6f5527881628f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"692679ac61ccbbc85e578926f0754c975bcc0a0f3092f80590de82a921a919d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:53:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:53:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/692679ac61ccbbc85e578926f0754c975bcc0a0f3092f80590de82a921a919d2"} {"level":"info","ts":"2026-07-13T21:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"692679ac61ccbbc85e578926f0754c975bcc0a0f3092f80590de82a921a919d2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52ef29ba1663c3289d4db6eb0264b254ec96400763b0f2a81667521515c6c44b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:53:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:53:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52ef29ba1663c3289d4db6eb0264b254ec96400763b0f2a81667521515c6c44b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"692679ac61ccbbc85e578926f0754c975bcc0a0f3092f80590de82a921a919d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:53:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:53:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["692679ac61ccbbc85e578926f0754c975bcc0a0f3092f80590de82a921a919d2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52ef29ba1663c3289d4db6eb0264b254ec96400763b0f2a81667521515c6c44b"} {"level":"info","ts":"2026-07-13T21:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"692679ac61ccbbc85e578926f0754c975bcc0a0f3092f80590de82a921a919d2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52ef29ba1663c3289d4db6eb0264b254ec96400763b0f2a81667521515c6c44b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:53:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:53:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["52ef29ba1663c3289d4db6eb0264b254ec96400763b0f2a81667521515c6c44b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63639f35ed5f0c6b5a99160b15958dd5303d096887d2661525b6f5527881628f"} {"level":"info","ts":"2026-07-13T21:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52ef29ba1663c3289d4db6eb0264b254ec96400763b0f2a81667521515c6c44b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"692679ac61ccbbc85e578926f0754c975bcc0a0f3092f80590de82a921a919d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:53:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:53:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"692679ac61ccbbc85e578926f0754c975bcc0a0f3092f80590de82a921a919d2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52ef29ba1663c3289d4db6eb0264b254ec96400763b0f2a81667521515c6c44b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41597dc90a1055059548c3b6c1d929d7586ee5d9a17a343966b6755f55bc676c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:53:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:53:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/692679ac61ccbbc85e578926f0754c975bcc0a0f3092f80590de82a921a919d2"} {"level":"info","ts":"2026-07-13T21:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41597dc90a1055059548c3b6c1d929d7586ee5d9a17a343966b6755f55bc676c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"692679ac61ccbbc85e578926f0754c975bcc0a0f3092f80590de82a921a919d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:53:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:53:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["692679ac61ccbbc85e578926f0754c975bcc0a0f3092f80590de82a921a919d2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52ef29ba1663c3289d4db6eb0264b254ec96400763b0f2a81667521515c6c44b"} {"level":"info","ts":"2026-07-13T21:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"692679ac61ccbbc85e578926f0754c975bcc0a0f3092f80590de82a921a919d2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41597dc90a1055059548c3b6c1d929d7586ee5d9a17a343966b6755f55bc676c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:53:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:53:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41597dc90a1055059548c3b6c1d929d7586ee5d9a17a343966b6755f55bc676c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"692679ac61ccbbc85e578926f0754c975bcc0a0f3092f80590de82a921a919d2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"41597dc90a1055059548c3b6c1d929d7586ee5d9a17a343966b6755f55bc676c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41597dc90a1055059548c3b6c1d929d7586ee5d9a17a343966b6755f55bc676c"} {"level":"debug","ts":"2026-07-13T21:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41597dc90a1055059548c3b6c1d929d7586ee5d9a17a343966b6755f55bc676c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:53:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:53:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["41597dc90a1055059548c3b6c1d929d7586ee5d9a17a343966b6755f55bc676c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41597dc90a1055059548c3b6c1d929d7586ee5d9a17a343966b6755f55bc676c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"41597dc90a1055059548c3b6c1d929d7586ee5d9a17a343966b6755f55bc676c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/692679ac61ccbbc85e578926f0754c975bcc0a0f3092f80590de82a921a919d2"} {"level":"info","ts":"2026-07-13T21:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41597dc90a1055059548c3b6c1d929d7586ee5d9a17a343966b6755f55bc676c"} {"level":"debug","ts":"2026-07-13T21:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60434538d525f056c172a715116180b748b9fd395df626659a2ffe587ff43594","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:53:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:53:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60434538d525f056c172a715116180b748b9fd395df626659a2ffe587ff43594","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60434538d525f056c172a715116180b748b9fd395df626659a2ffe587ff43594","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60434538d525f056c172a715116180b748b9fd395df626659a2ffe587ff43594"} {"level":"debug","ts":"2026-07-13T21:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60434538d525f056c172a715116180b748b9fd395df626659a2ffe587ff43594","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:53:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:53:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["60434538d525f056c172a715116180b748b9fd395df626659a2ffe587ff43594"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60434538d525f056c172a715116180b748b9fd395df626659a2ffe587ff43594","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60434538d525f056c172a715116180b748b9fd395df626659a2ffe587ff43594","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:53:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:53:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60434538d525f056c172a715116180b748b9fd395df626659a2ffe587ff43594"} {"level":"info","ts":"2026-07-13T21:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60434538d525f056c172a715116180b748b9fd395df626659a2ffe587ff43594","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60434538d525f056c172a715116180b748b9fd395df626659a2ffe587ff43594","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60434538d525f056c172a715116180b748b9fd395df626659a2ffe587ff43594","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60434538d525f056c172a715116180b748b9fd395df626659a2ffe587ff43594"} {"level":"debug","ts":"2026-07-13T21:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60434538d525f056c172a715116180b748b9fd395df626659a2ffe587ff43594","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60434538d525f056c172a715116180b748b9fd395df626659a2ffe587ff43594"} {"level":"debug","ts":"2026-07-13T21:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"176672d07edb24ea561c43d7f2a7131515a43fd01aff713f4eb78ac1726a4ee6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:53:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:53:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"176672d07edb24ea561c43d7f2a7131515a43fd01aff713f4eb78ac1726a4ee6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60434538d525f056c172a715116180b748b9fd395df626659a2ffe587ff43594","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:53:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:53:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["60434538d525f056c172a715116180b748b9fd395df626659a2ffe587ff43594"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/176672d07edb24ea561c43d7f2a7131515a43fd01aff713f4eb78ac1726a4ee6"} {"level":"info","ts":"2026-07-13T21:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60434538d525f056c172a715116180b748b9fd395df626659a2ffe587ff43594","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"176672d07edb24ea561c43d7f2a7131515a43fd01aff713f4eb78ac1726a4ee6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:53:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:53:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"176672d07edb24ea561c43d7f2a7131515a43fd01aff713f4eb78ac1726a4ee6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60434538d525f056c172a715116180b748b9fd395df626659a2ffe587ff43594","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"176672d07edb24ea561c43d7f2a7131515a43fd01aff713f4eb78ac1726a4ee6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/176672d07edb24ea561c43d7f2a7131515a43fd01aff713f4eb78ac1726a4ee6"} {"level":"debug","ts":"2026-07-13T21:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"176672d07edb24ea561c43d7f2a7131515a43fd01aff713f4eb78ac1726a4ee6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:53:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:53:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["176672d07edb24ea561c43d7f2a7131515a43fd01aff713f4eb78ac1726a4ee6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"176672d07edb24ea561c43d7f2a7131515a43fd01aff713f4eb78ac1726a4ee6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60434538d525f056c172a715116180b748b9fd395df626659a2ffe587ff43594"} {"level":"debug","ts":"2026-07-13T21:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"176672d07edb24ea561c43d7f2a7131515a43fd01aff713f4eb78ac1726a4ee6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:53:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:53:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"176672d07edb24ea561c43d7f2a7131515a43fd01aff713f4eb78ac1726a4ee6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"176672d07edb24ea561c43d7f2a7131515a43fd01aff713f4eb78ac1726a4ee6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"176672d07edb24ea561c43d7f2a7131515a43fd01aff713f4eb78ac1726a4ee6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/176672d07edb24ea561c43d7f2a7131515a43fd01aff713f4eb78ac1726a4ee6"} {"level":"debug","ts":"2026-07-13T21:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2624c29832b6d4f640d4c43319e39991909d71f924f0dca04f3015764e7bc35","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:53:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:53:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2624c29832b6d4f640d4c43319e39991909d71f924f0dca04f3015764e7bc35","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"176672d07edb24ea561c43d7f2a7131515a43fd01aff713f4eb78ac1726a4ee6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2624c29832b6d4f640d4c43319e39991909d71f924f0dca04f3015764e7bc35","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2624c29832b6d4f640d4c43319e39991909d71f924f0dca04f3015764e7bc35","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/176672d07edb24ea561c43d7f2a7131515a43fd01aff713f4eb78ac1726a4ee6"} {"level":"debug","ts":"2026-07-13T21:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2624c29832b6d4f640d4c43319e39991909d71f924f0dca04f3015764e7bc35","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:53:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:53:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2624c29832b6d4f640d4c43319e39991909d71f924f0dca04f3015764e7bc35","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"176672d07edb24ea561c43d7f2a7131515a43fd01aff713f4eb78ac1726a4ee6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:53:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:53:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["176672d07edb24ea561c43d7f2a7131515a43fd01aff713f4eb78ac1726a4ee6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"176672d07edb24ea561c43d7f2a7131515a43fd01aff713f4eb78ac1726a4ee6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2624c29832b6d4f640d4c43319e39991909d71f924f0dca04f3015764e7bc35","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"176672d07edb24ea561c43d7f2a7131515a43fd01aff713f4eb78ac1726a4ee6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2624c29832b6d4f640d4c43319e39991909d71f924f0dca04f3015764e7bc35"} {"level":"debug","ts":"2026-07-13T21:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2624c29832b6d4f640d4c43319e39991909d71f924f0dca04f3015764e7bc35","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:53:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:53:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c2624c29832b6d4f640d4c43319e39991909d71f924f0dca04f3015764e7bc35"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/176672d07edb24ea561c43d7f2a7131515a43fd01aff713f4eb78ac1726a4ee6"} {"level":"info","ts":"2026-07-13T21:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2624c29832b6d4f640d4c43319e39991909d71f924f0dca04f3015764e7bc35","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2624c29832b6d4f640d4c43319e39991909d71f924f0dca04f3015764e7bc35","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:53:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:53:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2624c29832b6d4f640d4c43319e39991909d71f924f0dca04f3015764e7bc35","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2624c29832b6d4f640d4c43319e39991909d71f924f0dca04f3015764e7bc35","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2624c29832b6d4f640d4c43319e39991909d71f924f0dca04f3015764e7bc35"} {"level":"debug","ts":"2026-07-13T21:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2624c29832b6d4f640d4c43319e39991909d71f924f0dca04f3015764e7bc35","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2624c29832b6d4f640d4c43319e39991909d71f924f0dca04f3015764e7bc35"} {"level":"debug","ts":"2026-07-13T21:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2624c29832b6d4f640d4c43319e39991909d71f924f0dca04f3015764e7bc35","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:53:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:53:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c2624c29832b6d4f640d4c43319e39991909d71f924f0dca04f3015764e7bc35"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2624c29832b6d4f640d4c43319e39991909d71f924f0dca04f3015764e7bc35","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2624c29832b6d4f640d4c43319e39991909d71f924f0dca04f3015764e7bc35","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2624c29832b6d4f640d4c43319e39991909d71f924f0dca04f3015764e7bc35"} {"level":"debug","ts":"2026-07-13T21:53:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52ef29ba1663c3289d4db6eb0264b254ec96400763b0f2a81667521515c6c44b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:53:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52ef29ba1663c3289d4db6eb0264b254ec96400763b0f2a81667521515c6c44b"} {"level":"debug","ts":"2026-07-13T21:53:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2624c29832b6d4f640d4c43319e39991909d71f924f0dca04f3015764e7bc35","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:53:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:53:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:53:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2624c29832b6d4f640d4c43319e39991909d71f924f0dca04f3015764e7bc35","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2624c29832b6d4f640d4c43319e39991909d71f924f0dca04f3015764e7bc35","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2624c29832b6d4f640d4c43319e39991909d71f924f0dca04f3015764e7bc35","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:53:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2624c29832b6d4f640d4c43319e39991909d71f924f0dca04f3015764e7bc35"} {"level":"debug","ts":"2026-07-13T21:53:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2624c29832b6d4f640d4c43319e39991909d71f924f0dca04f3015764e7bc35","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:53:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2624c29832b6d4f640d4c43319e39991909d71f924f0dca04f3015764e7bc35"} {"level":"debug","ts":"2026-07-13T21:53:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2624c29832b6d4f640d4c43319e39991909d71f924f0dca04f3015764e7bc35","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:53:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:53:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c2624c29832b6d4f640d4c43319e39991909d71f924f0dca04f3015764e7bc35"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:53:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2624c29832b6d4f640d4c43319e39991909d71f924f0dca04f3015764e7bc35","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2624c29832b6d4f640d4c43319e39991909d71f924f0dca04f3015764e7bc35","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:53:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:53:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:53:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2624c29832b6d4f640d4c43319e39991909d71f924f0dca04f3015764e7bc35","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ea8a35b2958daced20a2cd49091c403ab6f7c6af2c181fe2c7fe5b9059cad38","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2624c29832b6d4f640d4c43319e39991909d71f924f0dca04f3015764e7bc35","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2624c29832b6d4f640d4c43319e39991909d71f924f0dca04f3015764e7bc35","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:53:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2624c29832b6d4f640d4c43319e39991909d71f924f0dca04f3015764e7bc35"} {"level":"debug","ts":"2026-07-13T21:53:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2624c29832b6d4f640d4c43319e39991909d71f924f0dca04f3015764e7bc35","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:53:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:53:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c2624c29832b6d4f640d4c43319e39991909d71f924f0dca04f3015764e7bc35"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:53:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ea8a35b2958daced20a2cd49091c403ab6f7c6af2c181fe2c7fe5b9059cad38"} {"level":"info","ts":"2026-07-13T21:53:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2624c29832b6d4f640d4c43319e39991909d71f924f0dca04f3015764e7bc35","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2624c29832b6d4f640d4c43319e39991909d71f924f0dca04f3015764e7bc35","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:53:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:53:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:53:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2624c29832b6d4f640d4c43319e39991909d71f924f0dca04f3015764e7bc35","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:53:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2624c29832b6d4f640d4c43319e39991909d71f924f0dca04f3015764e7bc35"} {"level":"debug","ts":"2026-07-13T21:53:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2624c29832b6d4f640d4c43319e39991909d71f924f0dca04f3015764e7bc35","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2624c29832b6d4f640d4c43319e39991909d71f924f0dca04f3015764e7bc35","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:53:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2624c29832b6d4f640d4c43319e39991909d71f924f0dca04f3015764e7bc35"} {"level":"debug","ts":"2026-07-13T21:53:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2624c29832b6d4f640d4c43319e39991909d71f924f0dca04f3015764e7bc35","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b20bae1e4bd781d8950d5e72217c4e558adf27bdf23f993f25b5c17e51a311b3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:53:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2624c29832b6d4f640d4c43319e39991909d71f924f0dca04f3015764e7bc35"} {"level":"debug","ts":"2026-07-13T21:53:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"347d16811a3d165a7a404ac6723ca8ba73ef2c4756d6fb5e070867a32504d765","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:53:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b20bae1e4bd781d8950d5e72217c4e558adf27bdf23f993f25b5c17e51a311b3"} {"level":"debug","ts":"2026-07-13T21:53:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2624c29832b6d4f640d4c43319e39991909d71f924f0dca04f3015764e7bc35","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:53:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:53:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c2624c29832b6d4f640d4c43319e39991909d71f924f0dca04f3015764e7bc35"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:53:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2624c29832b6d4f640d4c43319e39991909d71f924f0dca04f3015764e7bc35","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2624c29832b6d4f640d4c43319e39991909d71f924f0dca04f3015764e7bc35","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:53:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/347d16811a3d165a7a404ac6723ca8ba73ef2c4756d6fb5e070867a32504d765"} {"level":"info","ts":"2026-07-13T21:53:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2624c29832b6d4f640d4c43319e39991909d71f924f0dca04f3015764e7bc35"} {"level":"debug","ts":"2026-07-13T21:53:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b6277fced272155a7e28bfc61508ab08581d16a9613c1ca3776a7223a860b1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:53:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:53:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:53:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b6277fced272155a7e28bfc61508ab08581d16a9613c1ca3776a7223a860b1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b6277fced272155a7e28bfc61508ab08581d16a9613c1ca3776a7223a860b1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b6277fced272155a7e28bfc61508ab08581d16a9613c1ca3776a7223a860b1a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:53:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b6277fced272155a7e28bfc61508ab08581d16a9613c1ca3776a7223a860b1a"} {"level":"debug","ts":"2026-07-13T21:53:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b6277fced272155a7e28bfc61508ab08581d16a9613c1ca3776a7223a860b1a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:53:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b6277fced272155a7e28bfc61508ab08581d16a9613c1ca3776a7223a860b1a"} {"level":"debug","ts":"2026-07-13T21:53:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b6277fced272155a7e28bfc61508ab08581d16a9613c1ca3776a7223a860b1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:53:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:53:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5b6277fced272155a7e28bfc61508ab08581d16a9613c1ca3776a7223a860b1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:53:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b6277fced272155a7e28bfc61508ab08581d16a9613c1ca3776a7223a860b1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9c588a307ba8480921ac9347fd526993aa73c32e5e4813a434bd200d3c318e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:53:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:53:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:53:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9c588a307ba8480921ac9347fd526993aa73c32e5e4813a434bd200d3c318e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b6277fced272155a7e28bfc61508ab08581d16a9613c1ca3776a7223a860b1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9c588a307ba8480921ac9347fd526993aa73c32e5e4813a434bd200d3c318e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9c588a307ba8480921ac9347fd526993aa73c32e5e4813a434bd200d3c318e5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:53:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9c588a307ba8480921ac9347fd526993aa73c32e5e4813a434bd200d3c318e5"} {"level":"debug","ts":"2026-07-13T21:53:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9c588a307ba8480921ac9347fd526993aa73c32e5e4813a434bd200d3c318e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:53:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:53:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d9c588a307ba8480921ac9347fd526993aa73c32e5e4813a434bd200d3c318e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:53:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b6277fced272155a7e28bfc61508ab08581d16a9613c1ca3776a7223a860b1a"} {"level":"info","ts":"2026-07-13T21:53:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9c588a307ba8480921ac9347fd526993aa73c32e5e4813a434bd200d3c318e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9c588a307ba8480921ac9347fd526993aa73c32e5e4813a434bd200d3c318e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:53:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:53:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:53:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9c588a307ba8480921ac9347fd526993aa73c32e5e4813a434bd200d3c318e5"} {"level":"info","ts":"2026-07-13T21:53:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9c588a307ba8480921ac9347fd526993aa73c32e5e4813a434bd200d3c318e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9c588a307ba8480921ac9347fd526993aa73c32e5e4813a434bd200d3c318e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9c588a307ba8480921ac9347fd526993aa73c32e5e4813a434bd200d3c318e5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:53:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9c588a307ba8480921ac9347fd526993aa73c32e5e4813a434bd200d3c318e5"} {"level":"debug","ts":"2026-07-13T21:53:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9c588a307ba8480921ac9347fd526993aa73c32e5e4813a434bd200d3c318e5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:53:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9c588a307ba8480921ac9347fd526993aa73c32e5e4813a434bd200d3c318e5"} {"level":"debug","ts":"2026-07-13T21:53:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9c588a307ba8480921ac9347fd526993aa73c32e5e4813a434bd200d3c318e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:53:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:53:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d9c588a307ba8480921ac9347fd526993aa73c32e5e4813a434bd200d3c318e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:53:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9c588a307ba8480921ac9347fd526993aa73c32e5e4813a434bd200d3c318e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9c588a307ba8480921ac9347fd526993aa73c32e5e4813a434bd200d3c318e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:53:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:53:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:53:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9c588a307ba8480921ac9347fd526993aa73c32e5e4813a434bd200d3c318e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9c588a307ba8480921ac9347fd526993aa73c32e5e4813a434bd200d3c318e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9c588a307ba8480921ac9347fd526993aa73c32e5e4813a434bd200d3c318e5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:53:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9c588a307ba8480921ac9347fd526993aa73c32e5e4813a434bd200d3c318e5"} {"level":"debug","ts":"2026-07-13T21:53:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9c588a307ba8480921ac9347fd526993aa73c32e5e4813a434bd200d3c318e5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:53:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9c588a307ba8480921ac9347fd526993aa73c32e5e4813a434bd200d3c318e5"} {"level":"debug","ts":"2026-07-13T21:53:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22b687a2f380d2ebc36c69c1053b5e07ad4b4e1adc5bbc9650791ad0ad92148f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:53:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:53:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:53:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22b687a2f380d2ebc36c69c1053b5e07ad4b4e1adc5bbc9650791ad0ad92148f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22b687a2f380d2ebc36c69c1053b5e07ad4b4e1adc5bbc9650791ad0ad92148f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22b687a2f380d2ebc36c69c1053b5e07ad4b4e1adc5bbc9650791ad0ad92148f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9c588a307ba8480921ac9347fd526993aa73c32e5e4813a434bd200d3c318e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:53:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:53:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d9c588a307ba8480921ac9347fd526993aa73c32e5e4813a434bd200d3c318e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:53:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22b687a2f380d2ebc36c69c1053b5e07ad4b4e1adc5bbc9650791ad0ad92148f"} {"level":"info","ts":"2026-07-13T21:53:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9c588a307ba8480921ac9347fd526993aa73c32e5e4813a434bd200d3c318e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9c588a307ba8480921ac9347fd526993aa73c32e5e4813a434bd200d3c318e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22b687a2f380d2ebc36c69c1053b5e07ad4b4e1adc5bbc9650791ad0ad92148f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:53:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22b687a2f380d2ebc36c69c1053b5e07ad4b4e1adc5bbc9650791ad0ad92148f"} {"level":"info","ts":"2026-07-13T21:53:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9c588a307ba8480921ac9347fd526993aa73c32e5e4813a434bd200d3c318e5"} {"level":"debug","ts":"2026-07-13T21:53:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22b687a2f380d2ebc36c69c1053b5e07ad4b4e1adc5bbc9650791ad0ad92148f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:53:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:53:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["22b687a2f380d2ebc36c69c1053b5e07ad4b4e1adc5bbc9650791ad0ad92148f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:53:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22b687a2f380d2ebc36c69c1053b5e07ad4b4e1adc5bbc9650791ad0ad92148f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22b687a2f380d2ebc36c69c1053b5e07ad4b4e1adc5bbc9650791ad0ad92148f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:53:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22b687a2f380d2ebc36c69c1053b5e07ad4b4e1adc5bbc9650791ad0ad92148f"} {"level":"debug","ts":"2026-07-13T21:53:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d99619663c9e99ed2b4eab5fdaa2776ae3cb7de53d501eed7801d313a819e5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:53:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:53:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:53:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d99619663c9e99ed2b4eab5fdaa2776ae3cb7de53d501eed7801d313a819e5a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d99619663c9e99ed2b4eab5fdaa2776ae3cb7de53d501eed7801d313a819e5a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d99619663c9e99ed2b4eab5fdaa2776ae3cb7de53d501eed7801d313a819e5a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:53:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d99619663c9e99ed2b4eab5fdaa2776ae3cb7de53d501eed7801d313a819e5a"} {"level":"debug","ts":"2026-07-13T21:53:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d99619663c9e99ed2b4eab5fdaa2776ae3cb7de53d501eed7801d313a819e5a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:53:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d99619663c9e99ed2b4eab5fdaa2776ae3cb7de53d501eed7801d313a819e5a"} {"level":"debug","ts":"2026-07-13T21:53:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d99619663c9e99ed2b4eab5fdaa2776ae3cb7de53d501eed7801d313a819e5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:53:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:53:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3d99619663c9e99ed2b4eab5fdaa2776ae3cb7de53d501eed7801d313a819e5a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:53:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d99619663c9e99ed2b4eab5fdaa2776ae3cb7de53d501eed7801d313a819e5a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d99619663c9e99ed2b4eab5fdaa2776ae3cb7de53d501eed7801d313a819e5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:53:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:53:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:53:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d99619663c9e99ed2b4eab5fdaa2776ae3cb7de53d501eed7801d313a819e5a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63639f35ed5f0c6b5a99160b15958dd5303d096887d2661525b6f5527881628f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d99619663c9e99ed2b4eab5fdaa2776ae3cb7de53d501eed7801d313a819e5a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d99619663c9e99ed2b4eab5fdaa2776ae3cb7de53d501eed7801d313a819e5a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:53:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d99619663c9e99ed2b4eab5fdaa2776ae3cb7de53d501eed7801d313a819e5a"} {"level":"debug","ts":"2026-07-13T21:53:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d99619663c9e99ed2b4eab5fdaa2776ae3cb7de53d501eed7801d313a819e5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:53:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:53:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3d99619663c9e99ed2b4eab5fdaa2776ae3cb7de53d501eed7801d313a819e5a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:53:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63639f35ed5f0c6b5a99160b15958dd5303d096887d2661525b6f5527881628f"} {"level":"info","ts":"2026-07-13T21:53:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d99619663c9e99ed2b4eab5fdaa2776ae3cb7de53d501eed7801d313a819e5a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d99619663c9e99ed2b4eab5fdaa2776ae3cb7de53d501eed7801d313a819e5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:53:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:53:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:53:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d99619663c9e99ed2b4eab5fdaa2776ae3cb7de53d501eed7801d313a819e5a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:53:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d99619663c9e99ed2b4eab5fdaa2776ae3cb7de53d501eed7801d313a819e5a"} {"level":"debug","ts":"2026-07-13T21:53:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d99619663c9e99ed2b4eab5fdaa2776ae3cb7de53d501eed7801d313a819e5a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d99619663c9e99ed2b4eab5fdaa2776ae3cb7de53d501eed7801d313a819e5a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:53:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d99619663c9e99ed2b4eab5fdaa2776ae3cb7de53d501eed7801d313a819e5a"} {"level":"debug","ts":"2026-07-13T21:53:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d99619663c9e99ed2b4eab5fdaa2776ae3cb7de53d501eed7801d313a819e5a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b6e9b069b073ae2cdcfdbc852687bbedc0d9fbc0f7942209ac98d36ebfa4ecf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:53:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d99619663c9e99ed2b4eab5fdaa2776ae3cb7de53d501eed7801d313a819e5a"} {"level":"debug","ts":"2026-07-13T21:53:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d85ea6aaa6a2ac5985407e9d46fe00a2bb4ba2e11ca2b8477df8f72c34b02b0d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:53:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b6e9b069b073ae2cdcfdbc852687bbedc0d9fbc0f7942209ac98d36ebfa4ecf"} {"level":"debug","ts":"2026-07-13T21:53:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d99619663c9e99ed2b4eab5fdaa2776ae3cb7de53d501eed7801d313a819e5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:53:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:53:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3d99619663c9e99ed2b4eab5fdaa2776ae3cb7de53d501eed7801d313a819e5a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:53:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d99619663c9e99ed2b4eab5fdaa2776ae3cb7de53d501eed7801d313a819e5a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60434538d525f056c172a715116180b748b9fd395df626659a2ffe587ff43594","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d99619663c9e99ed2b4eab5fdaa2776ae3cb7de53d501eed7801d313a819e5a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:53:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d85ea6aaa6a2ac5985407e9d46fe00a2bb4ba2e11ca2b8477df8f72c34b02b0d"} {"level":"info","ts":"2026-07-13T21:53:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60434538d525f056c172a715116180b748b9fd395df626659a2ffe587ff43594"} {"level":"info","ts":"2026-07-13T21:53:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d99619663c9e99ed2b4eab5fdaa2776ae3cb7de53d501eed7801d313a819e5a"} {"level":"debug","ts":"2026-07-13T21:53:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e72278d48292ebfc0f57d47ff124132bd3775dfd9ac3186d4226e107ee2746b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"41597dc90a1055059548c3b6c1d929d7586ee5d9a17a343966b6755f55bc676c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:53:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e72278d48292ebfc0f57d47ff124132bd3775dfd9ac3186d4226e107ee2746b"} {"level":"debug","ts":"2026-07-13T21:53:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61ed73b34e7c57a67f5fb31d349dde814be40d691f9d38503e58f2527352ca5a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4f6458d5e2caf0ecc3f52f1bd94b2e403d1ca7fe25380d8010b8ee308b062df","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:53:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41597dc90a1055059548c3b6c1d929d7586ee5d9a17a343966b6755f55bc676c"} {"level":"info","ts":"2026-07-13T21:53:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61ed73b34e7c57a67f5fb31d349dde814be40d691f9d38503e58f2527352ca5a"} {"level":"debug","ts":"2026-07-13T21:53:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"176672d07edb24ea561c43d7f2a7131515a43fd01aff713f4eb78ac1726a4ee6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"692679ac61ccbbc85e578926f0754c975bcc0a0f3092f80590de82a921a919d2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:53:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4f6458d5e2caf0ecc3f52f1bd94b2e403d1ca7fe25380d8010b8ee308b062df"} {"level":"debug","ts":"2026-07-13T21:53:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"407be41904019b18b50107a0a97b06c04b484a47240e0d114cc0dd8717c86ffd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3fff53257286e7107f76d02468c3f2017866329555fe3bc0bbeefe1dc4f44dc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"47e7646c076c7694c4e7db8d875ffa4d02e571afa2da9a2e9b12da743f6cfb16","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:53:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/176672d07edb24ea561c43d7f2a7131515a43fd01aff713f4eb78ac1726a4ee6"} {"level":"debug","ts":"2026-07-13T21:53:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab7bdc69acfc5a7370d97bc8ca70a8e9f5dd3911ac9e3036fa25432ed6cce4e0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:53:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/692679ac61ccbbc85e578926f0754c975bcc0a0f3092f80590de82a921a919d2"} {"level":"debug","ts":"2026-07-13T21:53:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"59fd6f75af8efa0ea3c760437ac095201bc9397336cc36c830ee37a9f27524fb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:53:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/407be41904019b18b50107a0a97b06c04b484a47240e0d114cc0dd8717c86ffd"} {"level":"info","ts":"2026-07-13T21:53:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3fff53257286e7107f76d02468c3f2017866329555fe3bc0bbeefe1dc4f44dc"} {"level":"info","ts":"2026-07-13T21:53:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47e7646c076c7694c4e7db8d875ffa4d02e571afa2da9a2e9b12da743f6cfb16"} {"level":"info","ts":"2026-07-13T21:53:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab7bdc69acfc5a7370d97bc8ca70a8e9f5dd3911ac9e3036fa25432ed6cce4e0"} {"level":"info","ts":"2026-07-13T21:53:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59fd6f75af8efa0ea3c760437ac095201bc9397336cc36c830ee37a9f27524fb"} {"level":"info","ts":"2026-07-13T21:53:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4fc7b140-490e-408f-aa66-5cdd9a6a2582","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:44726","PortSpecifier":{"PortValue":44726}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4fc7b140-490e-408f-aa66-5cdd9a6a2582","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8e2974.apps.294019ed-43ef-46f4-a4ce-c5c88067cb0f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-13T21:53:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4fc7b140-490e-408f-aa66-5cdd9a6a2582","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:44726","PortSpecifier":{"PortValue":44726}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783979608,"nanos":854794898},"http":{"id":"4fc7b140-490e-408f-aa66-5cdd9a6a2582","method":"POST","headers":{":authority":"e2e-shared-a-8e2974.apps.294019ed-43ef-46f4-a4ce-c5c88067cb0f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T21:53:28Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4fc7b140-490e-408f-aa66-5cdd9a6a2582","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-13T21:53:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4fc7b140-490e-408f-aa66-5cdd9a6a2582","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b62e8f90-7460-4bb9-9510-7f1180036f2d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=817b74d9-4ac4-4f4d-b17a-056132976a9e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c5c88067cb0f"]}} {"level":"debug","ts":"2026-07-13T21:53:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4fc7b140-490e-408f-aa66-5cdd9a6a2582","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c5c88067cb0f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=817b74d9-4ac4-4f4d-b17a-056132976a9e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b62e8f90-7460-4bb9-9510-7f1180036f2d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"407be41904019b18b50107a0a97b06c04b484a47240e0d114cc0dd8717c86ffd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8e2974.apps.294019ed-43ef-46f4-a4ce-c5c88067cb0f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T21:53:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4fc7b140-490e-408f-aa66-5cdd9a6a2582","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T21:53:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4fc7b140-490e-408f-aa66-5cdd9a6a2582","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T21:53:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4fc7b140-490e-408f-aa66-5cdd9a6a2582","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8e2974/sub-test-model-8e2974\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T21:53:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4fc7b140-490e-408f-aa66-5cdd9a6a2582","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-13T21:53:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4fc7b140-490e-408f-aa66-5cdd9a6a2582","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-13T21:53:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4fc7b140-490e-408f-aa66-5cdd9a6a2582","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-13T21:53:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4fc7b140-490e-408f-aa66-5cdd9a6a2582","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-13T21:53:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4fc7b140-490e-408f-aa66-5cdd9a6a2582","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-13T21:53:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fdb85cac-33bc-4ad3-89bf-4b696eff1359","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:38316","PortSpecifier":{"PortValue":38316}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fdb85cac-33bc-4ad3-89bf-4b696eff1359","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-884921.apps.294019ed-43ef-46f4-a4ce-c5c88067cb0f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-13T21:53:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fdb85cac-33bc-4ad3-89bf-4b696eff1359","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:38316","PortSpecifier":{"PortValue":38316}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783979608,"nanos":893713280},"http":{"id":"fdb85cac-33bc-4ad3-89bf-4b696eff1359","method":"POST","headers":{":authority":"e2e-shared-b-884921.apps.294019ed-43ef-46f4-a4ce-c5c88067cb0f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T21:53:28Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fdb85cac-33bc-4ad3-89bf-4b696eff1359","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-13T21:53:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fdb85cac-33bc-4ad3-89bf-4b696eff1359","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b62e8f90-7460-4bb9-9510-7f1180036f2d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=817b74d9-4ac4-4f4d-b17a-056132976a9e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c5c88067cb0f"]}} {"level":"debug","ts":"2026-07-13T21:53:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fdb85cac-33bc-4ad3-89bf-4b696eff1359","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c5c88067cb0f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=817b74d9-4ac4-4f4d-b17a-056132976a9e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b62e8f90-7460-4bb9-9510-7f1180036f2d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d9c588a307ba8480921ac9347fd526993aa73c32e5e4813a434bd200d3c318e5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-884921.apps.294019ed-43ef-46f4-a4ce-c5c88067cb0f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T21:53:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fdb85cac-33bc-4ad3-89bf-4b696eff1359","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T21:53:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fdb85cac-33bc-4ad3-89bf-4b696eff1359","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T21:53:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fdb85cac-33bc-4ad3-89bf-4b696eff1359","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-884921/sub-test-model-884921\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T21:53:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fdb85cac-33bc-4ad3-89bf-4b696eff1359","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-13T21:53:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fdb85cac-33bc-4ad3-89bf-4b696eff1359","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-13T21:53:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fdb85cac-33bc-4ad3-89bf-4b696eff1359","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-13T21:53:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fdb85cac-33bc-4ad3-89bf-4b696eff1359","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-13T21:53:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fdb85cac-33bc-4ad3-89bf-4b696eff1359","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-13T21:53:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2fb1207e-68e5-46f0-b883-25960c11572d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:44730","PortSpecifier":{"PortValue":44730}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2fb1207e-68e5-46f0-b883-25960c11572d","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-8e2974.apps.294019ed-43ef-46f4-a4ce-c5c88067cb0f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-13T21:53:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2fb1207e-68e5-46f0-b883-25960c11572d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:44730","PortSpecifier":{"PortValue":44730}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783979608,"nanos":926164331},"http":{"id":"2fb1207e-68e5-46f0-b883-25960c11572d","method":"GET","headers":{":authority":"e2e-shared-a-8e2974.apps.294019ed-43ef-46f4-a4ce-c5c88067cb0f.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T21:53:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2fb1207e-68e5-46f0-b883-25960c11572d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1D3dN3lKkQno0vdZs_gmQX4Wie0rv0Msh6OlRKanCkkG6c78FGkL57g3vCAFb"} {"level":"debug","ts":"2026-07-13T21:53:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2fb1207e-68e5-46f0-b883-25960c11572d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8e2974.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1D3dN3lKkQno0vdZs_gmQX4Wie0rv0Msh6OlRKanCkkG6c78FGkL57g3vCAFb\"}"} {"level":"debug","ts":"2026-07-13T21:53:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2fb1207e-68e5-46f0-b883-25960c11572d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8e2974.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"669de54b-6a30-4041-8206-8e60805927ac","keyName":"e2e-sub-iso-969e53","subscription":"e2e-a-only-a0fcd9","tenant":"e2e-shared-a-8e2974","userId":"669de54b-6a30-4041-8206-8e60805927ac","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-13T21:53:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2fb1207e-68e5-46f0-b883-25960c11572d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T21:53:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2fb1207e-68e5-46f0-b883-25960c11572d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T21:53:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2fb1207e-68e5-46f0-b883-25960c11572d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T21:53:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2fb1207e-68e5-46f0-b883-25960c11572d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8e2974/sub-test-model-8e2974\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T21:53:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2fb1207e-68e5-46f0-b883-25960c11572d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-13T21:53:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2fb1207e-68e5-46f0-b883-25960c11572d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-13T21:53:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2fb1207e-68e5-46f0-b883-25960c11572d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-a0fcd9"} {"level":"debug","ts":"2026-07-13T21:53:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2fb1207e-68e5-46f0-b883-25960c11572d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-13T21:53:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2fb1207e-68e5-46f0-b883-25960c11572d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-13T21:53:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2fb1207e-68e5-46f0-b883-25960c11572d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-13T21:53:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"87bd7515-f2df-4a9d-b45a-c1b32b967f63","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:38320","PortSpecifier":{"PortValue":38320}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"87bd7515-f2df-4a9d-b45a-c1b32b967f63","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-884921.apps.294019ed-43ef-46f4-a4ce-c5c88067cb0f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-13T21:53:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"87bd7515-f2df-4a9d-b45a-c1b32b967f63","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:38320","PortSpecifier":{"PortValue":38320}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783979608,"nanos":954097972},"http":{"id":"87bd7515-f2df-4a9d-b45a-c1b32b967f63","method":"GET","headers":{":authority":"e2e-shared-b-884921.apps.294019ed-43ef-46f4-a4ce-c5c88067cb0f.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T21:53:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"87bd7515-f2df-4a9d-b45a-c1b32b967f63","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1MZF0JEt1eoI0pQhC_34Ir8r7xSFfarrPRX11w8p9fyLSD7kgK6QztO0boD7G"} {"level":"debug","ts":"2026-07-13T21:53:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"87bd7515-f2df-4a9d-b45a-c1b32b967f63","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-884921.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1MZF0JEt1eoI0pQhC_34Ir8r7xSFfarrPRX11w8p9fyLSD7kgK6QztO0boD7G\"}"} {"level":"debug","ts":"2026-07-13T21:53:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"87bd7515-f2df-4a9d-b45a-c1b32b967f63","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-884921.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"dd3c9144-e218-4a72-9cad-9ec693a32f27","keyName":"e2e-sub-iso-fedc41","subscription":"e2e-b-only-a0fcd9","tenant":"e2e-shared-b-884921","userId":"dd3c9144-e218-4a72-9cad-9ec693a32f27","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-13T21:53:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"87bd7515-f2df-4a9d-b45a-c1b32b967f63","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T21:53:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"87bd7515-f2df-4a9d-b45a-c1b32b967f63","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T21:53:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"87bd7515-f2df-4a9d-b45a-c1b32b967f63","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T21:53:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"87bd7515-f2df-4a9d-b45a-c1b32b967f63","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-884921/sub-test-model-884921\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T21:53:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"87bd7515-f2df-4a9d-b45a-c1b32b967f63","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-13T21:53:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"87bd7515-f2df-4a9d-b45a-c1b32b967f63","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-13T21:53:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"87bd7515-f2df-4a9d-b45a-c1b32b967f63","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-13T21:53:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"87bd7515-f2df-4a9d-b45a-c1b32b967f63","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-a0fcd9"} {"level":"info","ts":"2026-07-13T21:53:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"87bd7515-f2df-4a9d-b45a-c1b32b967f63","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-13T21:53:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"87bd7515-f2df-4a9d-b45a-c1b32b967f63","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-13T21:53:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"758ad4ea-0260-4e0f-bf4c-1d492a9eafec","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:55718","PortSpecifier":{"PortValue":55718}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"758ad4ea-0260-4e0f-bf4c-1d492a9eafec","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8e2974.apps.294019ed-43ef-46f4-a4ce-c5c88067cb0f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-13T21:53:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"758ad4ea-0260-4e0f-bf4c-1d492a9eafec","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:55718","PortSpecifier":{"PortValue":55718}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783979620,"nanos":872767560},"http":{"id":"758ad4ea-0260-4e0f-bf4c-1d492a9eafec","method":"POST","headers":{":authority":"e2e-shared-a-8e2974.apps.294019ed-43ef-46f4-a4ce-c5c88067cb0f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T21:53:40Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"758ad4ea-0260-4e0f-bf4c-1d492a9eafec","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-13T21:53:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"758ad4ea-0260-4e0f-bf4c-1d492a9eafec","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b62e8f90-7460-4bb9-9510-7f1180036f2d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=817b74d9-4ac4-4f4d-b17a-056132976a9e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c5c88067cb0f"]}} {"level":"debug","ts":"2026-07-13T21:53:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"758ad4ea-0260-4e0f-bf4c-1d492a9eafec","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c5c88067cb0f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=817b74d9-4ac4-4f4d-b17a-056132976a9e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b62e8f90-7460-4bb9-9510-7f1180036f2d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"407be41904019b18b50107a0a97b06c04b484a47240e0d114cc0dd8717c86ffd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8e2974.apps.294019ed-43ef-46f4-a4ce-c5c88067cb0f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T21:53:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"758ad4ea-0260-4e0f-bf4c-1d492a9eafec","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T21:53:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"758ad4ea-0260-4e0f-bf4c-1d492a9eafec","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T21:53:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"758ad4ea-0260-4e0f-bf4c-1d492a9eafec","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8e2974/sub-test-model-8e2974\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T21:53:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"758ad4ea-0260-4e0f-bf4c-1d492a9eafec","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-13T21:53:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"758ad4ea-0260-4e0f-bf4c-1d492a9eafec","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-13T21:53:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"758ad4ea-0260-4e0f-bf4c-1d492a9eafec","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-13T21:53:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"758ad4ea-0260-4e0f-bf4c-1d492a9eafec","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-13T21:53:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"758ad4ea-0260-4e0f-bf4c-1d492a9eafec","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-13T21:53:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bc2ffff1-7c80-44f4-bd52-2a5ef78e04ef","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:39504","PortSpecifier":{"PortValue":39504}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bc2ffff1-7c80-44f4-bd52-2a5ef78e04ef","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-884921.apps.294019ed-43ef-46f4-a4ce-c5c88067cb0f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-13T21:53:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bc2ffff1-7c80-44f4-bd52-2a5ef78e04ef","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:39504","PortSpecifier":{"PortValue":39504}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783979620,"nanos":906494662},"http":{"id":"bc2ffff1-7c80-44f4-bd52-2a5ef78e04ef","method":"POST","headers":{":authority":"e2e-shared-b-884921.apps.294019ed-43ef-46f4-a4ce-c5c88067cb0f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T21:53:40Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"bc2ffff1-7c80-44f4-bd52-2a5ef78e04ef","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-13T21:53:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bc2ffff1-7c80-44f4-bd52-2a5ef78e04ef","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b62e8f90-7460-4bb9-9510-7f1180036f2d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=817b74d9-4ac4-4f4d-b17a-056132976a9e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c5c88067cb0f"]}} {"level":"debug","ts":"2026-07-13T21:53:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bc2ffff1-7c80-44f4-bd52-2a5ef78e04ef","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c5c88067cb0f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=817b74d9-4ac4-4f4d-b17a-056132976a9e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b62e8f90-7460-4bb9-9510-7f1180036f2d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d9c588a307ba8480921ac9347fd526993aa73c32e5e4813a434bd200d3c318e5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-884921.apps.294019ed-43ef-46f4-a4ce-c5c88067cb0f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T21:53:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bc2ffff1-7c80-44f4-bd52-2a5ef78e04ef","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T21:53:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bc2ffff1-7c80-44f4-bd52-2a5ef78e04ef","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T21:53:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bc2ffff1-7c80-44f4-bd52-2a5ef78e04ef","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-884921/sub-test-model-884921\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T21:53:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bc2ffff1-7c80-44f4-bd52-2a5ef78e04ef","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-13T21:53:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bc2ffff1-7c80-44f4-bd52-2a5ef78e04ef","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-13T21:53:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bc2ffff1-7c80-44f4-bd52-2a5ef78e04ef","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-13T21:53:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bc2ffff1-7c80-44f4-bd52-2a5ef78e04ef","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-13T21:53:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bc2ffff1-7c80-44f4-bd52-2a5ef78e04ef","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-13T21:53:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3ef1722b-2fb7-4f65-8132-df7752cc0e1c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:55732","PortSpecifier":{"PortValue":55732}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3ef1722b-2fb7-4f65-8132-df7752cc0e1c","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-8e2974.apps.294019ed-43ef-46f4-a4ce-c5c88067cb0f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-13T21:53:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3ef1722b-2fb7-4f65-8132-df7752cc0e1c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:55732","PortSpecifier":{"PortValue":55732}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783979620,"nanos":941172138},"http":{"id":"3ef1722b-2fb7-4f65-8132-df7752cc0e1c","method":"POST","headers":{":authority":"e2e-shared-a-8e2974.apps.294019ed-43ef-46f4-a4ce-c5c88067cb0f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T21:53:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3ef1722b-2fb7-4f65-8132-df7752cc0e1c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-iidRbqFbPkGBCgCD_orfGZQFoW4D1JthgMOjhkjyezE3fyYXlHF6pkmJXgeL"} {"level":"debug","ts":"2026-07-13T21:53:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3ef1722b-2fb7-4f65-8132-df7752cc0e1c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8e2974.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-iidRbqFbPkGBCgCD_orfGZQFoW4D1JthgMOjhkjyezE3fyYXlHF6pkmJXgeL\"}"} {"level":"debug","ts":"2026-07-13T21:53:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3ef1722b-2fb7-4f65-8132-df7752cc0e1c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8e2974.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6e279cd2-b87c-4bc6-9d3e-bf4465bd0a6e","keyName":"e2e-sub-iso-a91e18","subscription":"e2e-shared-sub-a6c866","tenant":"e2e-shared-a-8e2974","userId":"6e279cd2-b87c-4bc6-9d3e-bf4465bd0a6e","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-13T21:53:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3ef1722b-2fb7-4f65-8132-df7752cc0e1c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T21:53:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3ef1722b-2fb7-4f65-8132-df7752cc0e1c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T21:53:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3ef1722b-2fb7-4f65-8132-df7752cc0e1c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T21:53:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3ef1722b-2fb7-4f65-8132-df7752cc0e1c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8e2974/sub-test-model-8e2974\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T21:53:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3ef1722b-2fb7-4f65-8132-df7752cc0e1c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-a6c866"} {"level":"debug","ts":"2026-07-13T21:53:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3ef1722b-2fb7-4f65-8132-df7752cc0e1c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-13T21:53:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3ef1722b-2fb7-4f65-8132-df7752cc0e1c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-13T21:53:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3ef1722b-2fb7-4f65-8132-df7752cc0e1c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-13T21:53:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3ef1722b-2fb7-4f65-8132-df7752cc0e1c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-13T21:53:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3ef1722b-2fb7-4f65-8132-df7752cc0e1c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-13T21:53:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7e3206e4-59d6-4a0e-9da6-4c6d4e9ce09f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:39506","PortSpecifier":{"PortValue":39506}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7e3206e4-59d6-4a0e-9da6-4c6d4e9ce09f","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-884921.apps.294019ed-43ef-46f4-a4ce-c5c88067cb0f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-13T21:53:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7e3206e4-59d6-4a0e-9da6-4c6d4e9ce09f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:39506","PortSpecifier":{"PortValue":39506}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783979620,"nanos":966960545},"http":{"id":"7e3206e4-59d6-4a0e-9da6-4c6d4e9ce09f","method":"POST","headers":{":authority":"e2e-shared-b-884921.apps.294019ed-43ef-46f4-a4ce-c5c88067cb0f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T21:53:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7e3206e4-59d6-4a0e-9da6-4c6d4e9ce09f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Kj8icLQrOxbGJKBZ_BecfcAHJqrQrtWOTkrf7i1RawbOkQPr370yTpoRRbEC"} {"level":"debug","ts":"2026-07-13T21:53:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7e3206e4-59d6-4a0e-9da6-4c6d4e9ce09f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-884921.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Kj8icLQrOxbGJKBZ_BecfcAHJqrQrtWOTkrf7i1RawbOkQPr370yTpoRRbEC\"}"} {"level":"debug","ts":"2026-07-13T21:53:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7e3206e4-59d6-4a0e-9da6-4c6d4e9ce09f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-884921.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"dcf25bd3-ce7a-432a-8c3e-b6df318ce907","keyName":"e2e-sub-iso-67c9e2","subscription":"e2e-shared-sub-a6c866","tenant":"e2e-shared-b-884921","userId":"dcf25bd3-ce7a-432a-8c3e-b6df318ce907","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-13T21:53:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7e3206e4-59d6-4a0e-9da6-4c6d4e9ce09f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T21:53:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7e3206e4-59d6-4a0e-9da6-4c6d4e9ce09f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T21:53:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7e3206e4-59d6-4a0e-9da6-4c6d4e9ce09f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T21:53:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7e3206e4-59d6-4a0e-9da6-4c6d4e9ce09f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-884921/sub-test-model-884921\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T21:53:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7e3206e4-59d6-4a0e-9da6-4c6d4e9ce09f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-13T21:53:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7e3206e4-59d6-4a0e-9da6-4c6d4e9ce09f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-13T21:53:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7e3206e4-59d6-4a0e-9da6-4c6d4e9ce09f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-a6c866"} {"level":"debug","ts":"2026-07-13T21:53:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7e3206e4-59d6-4a0e-9da6-4c6d4e9ce09f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-13T21:53:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7e3206e4-59d6-4a0e-9da6-4c6d4e9ce09f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-13T21:53:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7e3206e4-59d6-4a0e-9da6-4c6d4e9ce09f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-13T21:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3b6e9b069b073ae2cdcfdbc852687bbedc0d9fbc0f7942209ac98d36ebfa4ecf"} {"level":"info","ts":"2026-07-13T21:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/47e7646c076c7694c4e7db8d875ffa4d02e571afa2da9a2e9b12da743f6cfb16"} {"level":"info","ts":"2026-07-13T21:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0ea8a35b2958daced20a2cd49091c403ab6f7c6af2c181fe2c7fe5b9059cad38"} {"level":"info","ts":"2026-07-13T21:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/61ed73b34e7c57a67f5fb31d349dde814be40d691f9d38503e58f2527352ca5a"} {"level":"info","ts":"2026-07-13T21:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/22b687a2f380d2ebc36c69c1053b5e07ad4b4e1adc5bbc9650791ad0ad92148f"} {"level":"info","ts":"2026-07-13T21:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d4f6458d5e2caf0ecc3f52f1bd94b2e403d1ca7fe25380d8010b8ee308b062df"} {"level":"info","ts":"2026-07-13T21:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ab7bdc69acfc5a7370d97bc8ca70a8e9f5dd3911ac9e3036fa25432ed6cce4e0"} {"level":"info","ts":"2026-07-13T21:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5b6277fced272155a7e28bfc61508ab08581d16a9613c1ca3776a7223a860b1a"} {"level":"debug","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b459e4e4da021b8e10954318368e9d1bae89a6f48d01d6c57ed0ee7918378830","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:53:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:53:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b459e4e4da021b8e10954318368e9d1bae89a6f48d01d6c57ed0ee7918378830","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b459e4e4da021b8e10954318368e9d1bae89a6f48d01d6c57ed0ee7918378830","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b459e4e4da021b8e10954318368e9d1bae89a6f48d01d6c57ed0ee7918378830","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b459e4e4da021b8e10954318368e9d1bae89a6f48d01d6c57ed0ee7918378830"} {"level":"debug","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b459e4e4da021b8e10954318368e9d1bae89a6f48d01d6c57ed0ee7918378830","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b459e4e4da021b8e10954318368e9d1bae89a6f48d01d6c57ed0ee7918378830"} {"level":"debug","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b459e4e4da021b8e10954318368e9d1bae89a6f48d01d6c57ed0ee7918378830","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:53:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:53:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b459e4e4da021b8e10954318368e9d1bae89a6f48d01d6c57ed0ee7918378830"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b459e4e4da021b8e10954318368e9d1bae89a6f48d01d6c57ed0ee7918378830","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b459e4e4da021b8e10954318368e9d1bae89a6f48d01d6c57ed0ee7918378830","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:53:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:53:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b459e4e4da021b8e10954318368e9d1bae89a6f48d01d6c57ed0ee7918378830","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b459e4e4da021b8e10954318368e9d1bae89a6f48d01d6c57ed0ee7918378830","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b459e4e4da021b8e10954318368e9d1bae89a6f48d01d6c57ed0ee7918378830","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b459e4e4da021b8e10954318368e9d1bae89a6f48d01d6c57ed0ee7918378830"} {"level":"debug","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b459e4e4da021b8e10954318368e9d1bae89a6f48d01d6c57ed0ee7918378830","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b459e4e4da021b8e10954318368e9d1bae89a6f48d01d6c57ed0ee7918378830"} {"level":"debug","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b459e4e4da021b8e10954318368e9d1bae89a6f48d01d6c57ed0ee7918378830","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:53:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:53:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b459e4e4da021b8e10954318368e9d1bae89a6f48d01d6c57ed0ee7918378830"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b459e4e4da021b8e10954318368e9d1bae89a6f48d01d6c57ed0ee7918378830","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b459e4e4da021b8e10954318368e9d1bae89a6f48d01d6c57ed0ee7918378830","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:53:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:53:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b459e4e4da021b8e10954318368e9d1bae89a6f48d01d6c57ed0ee7918378830","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9128a210da07d7ffc14e5b259b6d1258d6b31b2995a15e3fecb9c2ac159c4446","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:53:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:53:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b459e4e4da021b8e10954318368e9d1bae89a6f48d01d6c57ed0ee7918378830"} {"level":"info","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9128a210da07d7ffc14e5b259b6d1258d6b31b2995a15e3fecb9c2ac159c4446","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b459e4e4da021b8e10954318368e9d1bae89a6f48d01d6c57ed0ee7918378830","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:53:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:53:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b459e4e4da021b8e10954318368e9d1bae89a6f48d01d6c57ed0ee7918378830"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b459e4e4da021b8e10954318368e9d1bae89a6f48d01d6c57ed0ee7918378830","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9128a210da07d7ffc14e5b259b6d1258d6b31b2995a15e3fecb9c2ac159c4446","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:53:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:53:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9128a210da07d7ffc14e5b259b6d1258d6b31b2995a15e3fecb9c2ac159c4446"} {"level":"info","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9128a210da07d7ffc14e5b259b6d1258d6b31b2995a15e3fecb9c2ac159c4446","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b459e4e4da021b8e10954318368e9d1bae89a6f48d01d6c57ed0ee7918378830","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:53:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:53:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b459e4e4da021b8e10954318368e9d1bae89a6f48d01d6c57ed0ee7918378830","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9128a210da07d7ffc14e5b259b6d1258d6b31b2995a15e3fecb9c2ac159c4446","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:53:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:53:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9128a210da07d7ffc14e5b259b6d1258d6b31b2995a15e3fecb9c2ac159c4446"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b459e4e4da021b8e10954318368e9d1bae89a6f48d01d6c57ed0ee7918378830"} {"level":"info","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9128a210da07d7ffc14e5b259b6d1258d6b31b2995a15e3fecb9c2ac159c4446","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b459e4e4da021b8e10954318368e9d1bae89a6f48d01d6c57ed0ee7918378830","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:53:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:53:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b459e4e4da021b8e10954318368e9d1bae89a6f48d01d6c57ed0ee7918378830"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b459e4e4da021b8e10954318368e9d1bae89a6f48d01d6c57ed0ee7918378830","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9128a210da07d7ffc14e5b259b6d1258d6b31b2995a15e3fecb9c2ac159c4446","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:53:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:53:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9128a210da07d7ffc14e5b259b6d1258d6b31b2995a15e3fecb9c2ac159c4446"} {"level":"info","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9128a210da07d7ffc14e5b259b6d1258d6b31b2995a15e3fecb9c2ac159c4446","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b459e4e4da021b8e10954318368e9d1bae89a6f48d01d6c57ed0ee7918378830","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:53:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:53:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b459e4e4da021b8e10954318368e9d1bae89a6f48d01d6c57ed0ee7918378830"} {"level":"info","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b459e4e4da021b8e10954318368e9d1bae89a6f48d01d6c57ed0ee7918378830","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9128a210da07d7ffc14e5b259b6d1258d6b31b2995a15e3fecb9c2ac159c4446","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b459e4e4da021b8e10954318368e9d1bae89a6f48d01d6c57ed0ee7918378830","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:53:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:53:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b459e4e4da021b8e10954318368e9d1bae89a6f48d01d6c57ed0ee7918378830"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b459e4e4da021b8e10954318368e9d1bae89a6f48d01d6c57ed0ee7918378830","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9128a210da07d7ffc14e5b259b6d1258d6b31b2995a15e3fecb9c2ac159c4446","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b459e4e4da021b8e10954318368e9d1bae89a6f48d01d6c57ed0ee7918378830","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:53:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:53:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b459e4e4da021b8e10954318368e9d1bae89a6f48d01d6c57ed0ee7918378830"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b459e4e4da021b8e10954318368e9d1bae89a6f48d01d6c57ed0ee7918378830","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b459e4e4da021b8e10954318368e9d1bae89a6f48d01d6c57ed0ee7918378830\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b459e4e4da021b8e10954318368e9d1bae89a6f48d01d6c57ed0ee7918378830","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9128a210da07d7ffc14e5b259b6d1258d6b31b2995a15e3fecb9c2ac159c4446"} {"level":"debug","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b459e4e4da021b8e10954318368e9d1bae89a6f48d01d6c57ed0ee7918378830","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:53:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:53:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b459e4e4da021b8e10954318368e9d1bae89a6f48d01d6c57ed0ee7918378830","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9128a210da07d7ffc14e5b259b6d1258d6b31b2995a15e3fecb9c2ac159c4446","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:53:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:53:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9128a210da07d7ffc14e5b259b6d1258d6b31b2995a15e3fecb9c2ac159c4446"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b459e4e4da021b8e10954318368e9d1bae89a6f48d01d6c57ed0ee7918378830"} {"level":"info","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9128a210da07d7ffc14e5b259b6d1258d6b31b2995a15e3fecb9c2ac159c4446","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b459e4e4da021b8e10954318368e9d1bae89a6f48d01d6c57ed0ee7918378830","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9128a210da07d7ffc14e5b259b6d1258d6b31b2995a15e3fecb9c2ac159c4446","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b459e4e4da021b8e10954318368e9d1bae89a6f48d01d6c57ed0ee7918378830","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b459e4e4da021b8e10954318368e9d1bae89a6f48d01d6c57ed0ee7918378830"} {"level":"debug","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b459e4e4da021b8e10954318368e9d1bae89a6f48d01d6c57ed0ee7918378830","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:53:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:53:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b459e4e4da021b8e10954318368e9d1bae89a6f48d01d6c57ed0ee7918378830"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9128a210da07d7ffc14e5b259b6d1258d6b31b2995a15e3fecb9c2ac159c4446"} {"level":"info","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b459e4e4da021b8e10954318368e9d1bae89a6f48d01d6c57ed0ee7918378830","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b459e4e4da021b8e10954318368e9d1bae89a6f48d01d6c57ed0ee7918378830","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:53:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:53:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b459e4e4da021b8e10954318368e9d1bae89a6f48d01d6c57ed0ee7918378830","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43a20a1a2d3fcc704a4a1e0f86d9efc2ba06e0f0333e5705592f8920362794c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:53:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:53:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b459e4e4da021b8e10954318368e9d1bae89a6f48d01d6c57ed0ee7918378830"} {"level":"info","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43a20a1a2d3fcc704a4a1e0f86d9efc2ba06e0f0333e5705592f8920362794c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b459e4e4da021b8e10954318368e9d1bae89a6f48d01d6c57ed0ee7918378830","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:53:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:53:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b459e4e4da021b8e10954318368e9d1bae89a6f48d01d6c57ed0ee7918378830"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b459e4e4da021b8e10954318368e9d1bae89a6f48d01d6c57ed0ee7918378830","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43a20a1a2d3fcc704a4a1e0f86d9efc2ba06e0f0333e5705592f8920362794c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:53:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:53:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43a20a1a2d3fcc704a4a1e0f86d9efc2ba06e0f0333e5705592f8920362794c8"} {"level":"info","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43a20a1a2d3fcc704a4a1e0f86d9efc2ba06e0f0333e5705592f8920362794c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b459e4e4da021b8e10954318368e9d1bae89a6f48d01d6c57ed0ee7918378830","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:53:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:53:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b459e4e4da021b8e10954318368e9d1bae89a6f48d01d6c57ed0ee7918378830","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43a20a1a2d3fcc704a4a1e0f86d9efc2ba06e0f0333e5705592f8920362794c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:53:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:53:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["43a20a1a2d3fcc704a4a1e0f86d9efc2ba06e0f0333e5705592f8920362794c8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b459e4e4da021b8e10954318368e9d1bae89a6f48d01d6c57ed0ee7918378830"} {"level":"info","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43a20a1a2d3fcc704a4a1e0f86d9efc2ba06e0f0333e5705592f8920362794c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b459e4e4da021b8e10954318368e9d1bae89a6f48d01d6c57ed0ee7918378830","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:53:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:53:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b459e4e4da021b8e10954318368e9d1bae89a6f48d01d6c57ed0ee7918378830"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43a20a1a2d3fcc704a4a1e0f86d9efc2ba06e0f0333e5705592f8920362794c8"} {"level":"info","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b459e4e4da021b8e10954318368e9d1bae89a6f48d01d6c57ed0ee7918378830","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43a20a1a2d3fcc704a4a1e0f86d9efc2ba06e0f0333e5705592f8920362794c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b459e4e4da021b8e10954318368e9d1bae89a6f48d01d6c57ed0ee7918378830","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:53:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:53:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b459e4e4da021b8e10954318368e9d1bae89a6f48d01d6c57ed0ee7918378830","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b459e4e4da021b8e10954318368e9d1bae89a6f48d01d6c57ed0ee7918378830","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b459e4e4da021b8e10954318368e9d1bae89a6f48d01d6c57ed0ee7918378830","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b459e4e4da021b8e10954318368e9d1bae89a6f48d01d6c57ed0ee7918378830"} {"level":"debug","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b459e4e4da021b8e10954318368e9d1bae89a6f48d01d6c57ed0ee7918378830","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:53:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:53:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b459e4e4da021b8e10954318368e9d1bae89a6f48d01d6c57ed0ee7918378830"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43a20a1a2d3fcc704a4a1e0f86d9efc2ba06e0f0333e5705592f8920362794c8"} {"level":"info","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b459e4e4da021b8e10954318368e9d1bae89a6f48d01d6c57ed0ee7918378830","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b459e4e4da021b8e10954318368e9d1bae89a6f48d01d6c57ed0ee7918378830","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:53:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:53:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b459e4e4da021b8e10954318368e9d1bae89a6f48d01d6c57ed0ee7918378830"} {"level":"info","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b459e4e4da021b8e10954318368e9d1bae89a6f48d01d6c57ed0ee7918378830","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b459e4e4da021b8e10954318368e9d1bae89a6f48d01d6c57ed0ee7918378830","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b459e4e4da021b8e10954318368e9d1bae89a6f48d01d6c57ed0ee7918378830","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b459e4e4da021b8e10954318368e9d1bae89a6f48d01d6c57ed0ee7918378830"} {"level":"debug","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b459e4e4da021b8e10954318368e9d1bae89a6f48d01d6c57ed0ee7918378830","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b459e4e4da021b8e10954318368e9d1bae89a6f48d01d6c57ed0ee7918378830"} {"level":"debug","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1bec6e8829fc8d29f2c64c6e514ab8aa1aad2ecf77437c6421fc0971515f0c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:53:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:53:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1bec6e8829fc8d29f2c64c6e514ab8aa1aad2ecf77437c6421fc0971515f0c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1bec6e8829fc8d29f2c64c6e514ab8aa1aad2ecf77437c6421fc0971515f0c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1bec6e8829fc8d29f2c64c6e514ab8aa1aad2ecf77437c6421fc0971515f0c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b459e4e4da021b8e10954318368e9d1bae89a6f48d01d6c57ed0ee7918378830","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:53:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:53:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b459e4e4da021b8e10954318368e9d1bae89a6f48d01d6c57ed0ee7918378830"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1bec6e8829fc8d29f2c64c6e514ab8aa1aad2ecf77437c6421fc0971515f0c9"} {"level":"info","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b459e4e4da021b8e10954318368e9d1bae89a6f48d01d6c57ed0ee7918378830","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b459e4e4da021b8e10954318368e9d1bae89a6f48d01d6c57ed0ee7918378830","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1bec6e8829fc8d29f2c64c6e514ab8aa1aad2ecf77437c6421fc0971515f0c9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1bec6e8829fc8d29f2c64c6e514ab8aa1aad2ecf77437c6421fc0971515f0c9"} {"level":"info","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b459e4e4da021b8e10954318368e9d1bae89a6f48d01d6c57ed0ee7918378830"} {"level":"debug","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1bec6e8829fc8d29f2c64c6e514ab8aa1aad2ecf77437c6421fc0971515f0c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:53:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:53:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d1bec6e8829fc8d29f2c64c6e514ab8aa1aad2ecf77437c6421fc0971515f0c9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1bec6e8829fc8d29f2c64c6e514ab8aa1aad2ecf77437c6421fc0971515f0c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1bec6e8829fc8d29f2c64c6e514ab8aa1aad2ecf77437c6421fc0971515f0c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:53:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:53:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1bec6e8829fc8d29f2c64c6e514ab8aa1aad2ecf77437c6421fc0971515f0c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1ddf439da31a95eed789cc4080951b0c54179101505c1c74341d58ad75632dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:53:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:53:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1bec6e8829fc8d29f2c64c6e514ab8aa1aad2ecf77437c6421fc0971515f0c9"} {"level":"info","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1ddf439da31a95eed789cc4080951b0c54179101505c1c74341d58ad75632dd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1bec6e8829fc8d29f2c64c6e514ab8aa1aad2ecf77437c6421fc0971515f0c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:53:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:53:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d1bec6e8829fc8d29f2c64c6e514ab8aa1aad2ecf77437c6421fc0971515f0c9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1bec6e8829fc8d29f2c64c6e514ab8aa1aad2ecf77437c6421fc0971515f0c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1ddf439da31a95eed789cc4080951b0c54179101505c1c74341d58ad75632dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:53:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:53:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1ddf439da31a95eed789cc4080951b0c54179101505c1c74341d58ad75632dd"} {"level":"info","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1ddf439da31a95eed789cc4080951b0c54179101505c1c74341d58ad75632dd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1bec6e8829fc8d29f2c64c6e514ab8aa1aad2ecf77437c6421fc0971515f0c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:53:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:53:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1bec6e8829fc8d29f2c64c6e514ab8aa1aad2ecf77437c6421fc0971515f0c9"} {"level":"info","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1bec6e8829fc8d29f2c64c6e514ab8aa1aad2ecf77437c6421fc0971515f0c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c1ddf439da31a95eed789cc4080951b0c54179101505c1c74341d58ad75632dd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1bec6e8829fc8d29f2c64c6e514ab8aa1aad2ecf77437c6421fc0971515f0c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:53:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:53:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d1bec6e8829fc8d29f2c64c6e514ab8aa1aad2ecf77437c6421fc0971515f0c9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1bec6e8829fc8d29f2c64c6e514ab8aa1aad2ecf77437c6421fc0971515f0c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1bec6e8829fc8d29f2c64c6e514ab8aa1aad2ecf77437c6421fc0971515f0c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:53:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:53:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d1bec6e8829fc8d29f2c64c6e514ab8aa1aad2ecf77437c6421fc0971515f0c9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d1bec6e8829fc8d29f2c64c6e514ab8aa1aad2ecf77437c6421fc0971515f0c9","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d1bec6e8829fc8d29f2c64c6e514ab8aa1aad2ecf77437c6421fc0971515f0c9\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c1ddf439da31a95eed789cc4080951b0c54179101505c1c74341d58ad75632dd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1bec6e8829fc8d29f2c64c6e514ab8aa1aad2ecf77437c6421fc0971515f0c9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1ddf439da31a95eed789cc4080951b0c54179101505c1c74341d58ad75632dd"} {"level":"debug","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1bec6e8829fc8d29f2c64c6e514ab8aa1aad2ecf77437c6421fc0971515f0c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:53:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:53:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1bec6e8829fc8d29f2c64c6e514ab8aa1aad2ecf77437c6421fc0971515f0c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1bec6e8829fc8d29f2c64c6e514ab8aa1aad2ecf77437c6421fc0971515f0c9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1bec6e8829fc8d29f2c64c6e514ab8aa1aad2ecf77437c6421fc0971515f0c9"} {"level":"debug","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1bec6e8829fc8d29f2c64c6e514ab8aa1aad2ecf77437c6421fc0971515f0c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1ddf439da31a95eed789cc4080951b0c54179101505c1c74341d58ad75632dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:53:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:53:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c1ddf439da31a95eed789cc4080951b0c54179101505c1c74341d58ad75632dd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1bec6e8829fc8d29f2c64c6e514ab8aa1aad2ecf77437c6421fc0971515f0c9"} {"level":"info","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1ddf439da31a95eed789cc4080951b0c54179101505c1c74341d58ad75632dd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1bec6e8829fc8d29f2c64c6e514ab8aa1aad2ecf77437c6421fc0971515f0c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:53:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:53:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d1bec6e8829fc8d29f2c64c6e514ab8aa1aad2ecf77437c6421fc0971515f0c9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1bec6e8829fc8d29f2c64c6e514ab8aa1aad2ecf77437c6421fc0971515f0c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1ddf439da31a95eed789cc4080951b0c54179101505c1c74341d58ad75632dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:53:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:53:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1ddf439da31a95eed789cc4080951b0c54179101505c1c74341d58ad75632dd"} {"level":"info","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1ddf439da31a95eed789cc4080951b0c54179101505c1c74341d58ad75632dd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1bec6e8829fc8d29f2c64c6e514ab8aa1aad2ecf77437c6421fc0971515f0c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:53:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:53:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1bec6e8829fc8d29f2c64c6e514ab8aa1aad2ecf77437c6421fc0971515f0c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1ddf439da31a95eed789cc4080951b0c54179101505c1c74341d58ad75632dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:53:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:53:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c1ddf439da31a95eed789cc4080951b0c54179101505c1c74341d58ad75632dd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1bec6e8829fc8d29f2c64c6e514ab8aa1aad2ecf77437c6421fc0971515f0c9"} {"level":"info","ts":"2026-07-13T21:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1ddf439da31a95eed789cc4080951b0c54179101505c1c74341d58ad75632dd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1bec6e8829fc8d29f2c64c6e514ab8aa1aad2ecf77437c6421fc0971515f0c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:53:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:53:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d1bec6e8829fc8d29f2c64c6e514ab8aa1aad2ecf77437c6421fc0971515f0c9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1bec6e8829fc8d29f2c64c6e514ab8aa1aad2ecf77437c6421fc0971515f0c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1ddf439da31a95eed789cc4080951b0c54179101505c1c74341d58ad75632dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:53:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:53:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1ddf439da31a95eed789cc4080951b0c54179101505c1c74341d58ad75632dd"} {"level":"info","ts":"2026-07-13T21:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1ddf439da31a95eed789cc4080951b0c54179101505c1c74341d58ad75632dd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63d22a632d565b81e66c2bd3987541cebcb00579635ce9bc25e1bfa22cb008e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:53:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:53:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63d22a632d565b81e66c2bd3987541cebcb00579635ce9bc25e1bfa22cb008e8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1bec6e8829fc8d29f2c64c6e514ab8aa1aad2ecf77437c6421fc0971515f0c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:53:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:53:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1bec6e8829fc8d29f2c64c6e514ab8aa1aad2ecf77437c6421fc0971515f0c9"} {"level":"info","ts":"2026-07-13T21:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1bec6e8829fc8d29f2c64c6e514ab8aa1aad2ecf77437c6421fc0971515f0c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1ddf439da31a95eed789cc4080951b0c54179101505c1c74341d58ad75632dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:53:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:53:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c1ddf439da31a95eed789cc4080951b0c54179101505c1c74341d58ad75632dd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1ddf439da31a95eed789cc4080951b0c54179101505c1c74341d58ad75632dd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63d22a632d565b81e66c2bd3987541cebcb00579635ce9bc25e1bfa22cb008e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:53:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:53:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63d22a632d565b81e66c2bd3987541cebcb00579635ce9bc25e1bfa22cb008e8"} {"level":"info","ts":"2026-07-13T21:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1ddf439da31a95eed789cc4080951b0c54179101505c1c74341d58ad75632dd"} {"level":"info","ts":"2026-07-13T21:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63d22a632d565b81e66c2bd3987541cebcb00579635ce9bc25e1bfa22cb008e8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1bec6e8829fc8d29f2c64c6e514ab8aa1aad2ecf77437c6421fc0971515f0c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c1ddf439da31a95eed789cc4080951b0c54179101505c1c74341d58ad75632dd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35577edf4630bc48d06493e7281d83c6eb852165d309a44b184f6fc868204f81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:53:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:53:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1bec6e8829fc8d29f2c64c6e514ab8aa1aad2ecf77437c6421fc0971515f0c9"} {"level":"info","ts":"2026-07-13T21:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35577edf4630bc48d06493e7281d83c6eb852165d309a44b184f6fc868204f81"} {"level":"info","ts":"2026-07-13T21:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35577edf4630bc48d06493e7281d83c6eb852165d309a44b184f6fc868204f81","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63d22a632d565b81e66c2bd3987541cebcb00579635ce9bc25e1bfa22cb008e8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1bec6e8829fc8d29f2c64c6e514ab8aa1aad2ecf77437c6421fc0971515f0c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:53:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:53:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d1bec6e8829fc8d29f2c64c6e514ab8aa1aad2ecf77437c6421fc0971515f0c9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63d22a632d565b81e66c2bd3987541cebcb00579635ce9bc25e1bfa22cb008e8"} {"level":"info","ts":"2026-07-13T21:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35577edf4630bc48d06493e7281d83c6eb852165d309a44b184f6fc868204f81"} {"level":"info","ts":"2026-07-13T21:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c82a891cbdf2bd849d194107bab0b8395b3e629ea1b6cb45e3180e70fb5e56f0"} {"level":"info","ts":"2026-07-13T21:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/63639f35ed5f0c6b5a99160b15958dd5303d096887d2661525b6f5527881628f"} {"level":"info","ts":"2026-07-13T21:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/60434538d525f056c172a715116180b748b9fd395df626659a2ffe587ff43594"} {"level":"info","ts":"2026-07-13T21:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c2624c29832b6d4f640d4c43319e39991909d71f924f0dca04f3015764e7bc35"} {"level":"info","ts":"2026-07-13T21:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1bec6e8829fc8d29f2c64c6e514ab8aa1aad2ecf77437c6421fc0971515f0c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35577edf4630bc48d06493e7281d83c6eb852165d309a44b184f6fc868204f81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:53:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:53:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35577edf4630bc48d06493e7281d83c6eb852165d309a44b184f6fc868204f81"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/176672d07edb24ea561c43d7f2a7131515a43fd01aff713f4eb78ac1726a4ee6"} {"level":"info","ts":"2026-07-13T21:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8e72278d48292ebfc0f57d47ff124132bd3775dfd9ac3186d4226e107ee2746b"} {"level":"info","ts":"2026-07-13T21:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1bec6e8829fc8d29f2c64c6e514ab8aa1aad2ecf77437c6421fc0971515f0c9"} {"level":"info","ts":"2026-07-13T21:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/52ef29ba1663c3289d4db6eb0264b254ec96400763b0f2a81667521515c6c44b"} {"level":"info","ts":"2026-07-13T21:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/41597dc90a1055059548c3b6c1d929d7586ee5d9a17a343966b6755f55bc676c"} {"level":"info","ts":"2026-07-13T21:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35577edf4630bc48d06493e7281d83c6eb852165d309a44b184f6fc868204f81","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c82a891cbdf2bd849d194107bab0b8395b3e629ea1b6cb45e3180e70fb5e56f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:53:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:53:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c82a891cbdf2bd849d194107bab0b8395b3e629ea1b6cb45e3180e70fb5e56f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35577edf4630bc48d06493e7281d83c6eb852165d309a44b184f6fc868204f81"} {"level":"info","ts":"2026-07-13T21:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/692679ac61ccbbc85e578926f0754c975bcc0a0f3092f80590de82a921a919d2"} {"level":"info","ts":"2026-07-13T21:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c82a891cbdf2bd849d194107bab0b8395b3e629ea1b6cb45e3180e70fb5e56f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63d22a632d565b81e66c2bd3987541cebcb00579635ce9bc25e1bfa22cb008e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:53:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:53:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63d22a632d565b81e66c2bd3987541cebcb00579635ce9bc25e1bfa22cb008e8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c82a891cbdf2bd849d194107bab0b8395b3e629ea1b6cb45e3180e70fb5e56f0"} {"level":"info","ts":"2026-07-13T21:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63d22a632d565b81e66c2bd3987541cebcb00579635ce9bc25e1bfa22cb008e8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1bec6e8829fc8d29f2c64c6e514ab8aa1aad2ecf77437c6421fc0971515f0c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35577edf4630bc48d06493e7281d83c6eb852165d309a44b184f6fc868204f81","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c82a891cbdf2bd849d194107bab0b8395b3e629ea1b6cb45e3180e70fb5e56f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63d22a632d565b81e66c2bd3987541cebcb00579635ce9bc25e1bfa22cb008e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:53:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:53:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63d22a632d565b81e66c2bd3987541cebcb00579635ce9bc25e1bfa22cb008e8"} {"level":"info","ts":"2026-07-13T21:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63d22a632d565b81e66c2bd3987541cebcb00579635ce9bc25e1bfa22cb008e8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63d22a632d565b81e66c2bd3987541cebcb00579635ce9bc25e1bfa22cb008e8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63d22a632d565b81e66c2bd3987541cebcb00579635ce9bc25e1bfa22cb008e8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63d22a632d565b81e66c2bd3987541cebcb00579635ce9bc25e1bfa22cb008e8"} {"level":"debug","ts":"2026-07-13T21:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63d22a632d565b81e66c2bd3987541cebcb00579635ce9bc25e1bfa22cb008e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:53:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:53:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63d22a632d565b81e66c2bd3987541cebcb00579635ce9bc25e1bfa22cb008e8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63d22a632d565b81e66c2bd3987541cebcb00579635ce9bc25e1bfa22cb008e8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63d22a632d565b81e66c2bd3987541cebcb00579635ce9bc25e1bfa22cb008e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:53:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:53:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63d22a632d565b81e66c2bd3987541cebcb00579635ce9bc25e1bfa22cb008e8"} {"level":"info","ts":"2026-07-13T21:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63d22a632d565b81e66c2bd3987541cebcb00579635ce9bc25e1bfa22cb008e8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63d22a632d565b81e66c2bd3987541cebcb00579635ce9bc25e1bfa22cb008e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:53:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:53:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63d22a632d565b81e66c2bd3987541cebcb00579635ce9bc25e1bfa22cb008e8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63d22a632d565b81e66c2bd3987541cebcb00579635ce9bc25e1bfa22cb008e8"} {"level":"info","ts":"2026-07-13T21:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63d22a632d565b81e66c2bd3987541cebcb00579635ce9bc25e1bfa22cb008e8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63d22a632d565b81e66c2bd3987541cebcb00579635ce9bc25e1bfa22cb008e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:53:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:53:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63d22a632d565b81e66c2bd3987541cebcb00579635ce9bc25e1bfa22cb008e8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63d22a632d565b81e66c2bd3987541cebcb00579635ce9bc25e1bfa22cb008e8"} {"level":"error","ts":"2026-07-13T21:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"63d22a632d565b81e66c2bd3987541cebcb00579635ce9bc25e1bfa22cb008e8","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"63d22a632d565b81e66c2bd3987541cebcb00579635ce9bc25e1bfa22cb008e8\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-13T21:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63d22a632d565b81e66c2bd3987541cebcb00579635ce9bc25e1bfa22cb008e8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63d22a632d565b81e66c2bd3987541cebcb00579635ce9bc25e1bfa22cb008e8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d4f95d24c41058b1f35927f574ce762cda6df949757fe8e83f65a64bde52c12","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d4f95d24c41058b1f35927f574ce762cda6df949757fe8e83f65a64bde52c12","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d4f95d24c41058b1f35927f574ce762cda6df949757fe8e83f65a64bde52c12","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d4f95d24c41058b1f35927f574ce762cda6df949757fe8e83f65a64bde52c12","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d4f95d24c41058b1f35927f574ce762cda6df949757fe8e83f65a64bde52c12"} {"level":"debug","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d4f95d24c41058b1f35927f574ce762cda6df949757fe8e83f65a64bde52c12","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d4f95d24c41058b1f35927f574ce762cda6df949757fe8e83f65a64bde52c12"} {"level":"debug","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d4f95d24c41058b1f35927f574ce762cda6df949757fe8e83f65a64bde52c12","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3d4f95d24c41058b1f35927f574ce762cda6df949757fe8e83f65a64bde52c12"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d4f95d24c41058b1f35927f574ce762cda6df949757fe8e83f65a64bde52c12","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d4f95d24c41058b1f35927f574ce762cda6df949757fe8e83f65a64bde52c12","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d4f95d24c41058b1f35927f574ce762cda6df949757fe8e83f65a64bde52c12","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88a8adcafb9fab2dae0e03109552bd78f78311a155440b5a6b802ad8201f667f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d4f95d24c41058b1f35927f574ce762cda6df949757fe8e83f65a64bde52c12"} {"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88a8adcafb9fab2dae0e03109552bd78f78311a155440b5a6b802ad8201f667f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d4f95d24c41058b1f35927f574ce762cda6df949757fe8e83f65a64bde52c12","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3d4f95d24c41058b1f35927f574ce762cda6df949757fe8e83f65a64bde52c12"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d4f95d24c41058b1f35927f574ce762cda6df949757fe8e83f65a64bde52c12","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88a8adcafb9fab2dae0e03109552bd78f78311a155440b5a6b802ad8201f667f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88a8adcafb9fab2dae0e03109552bd78f78311a155440b5a6b802ad8201f667f"} {"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88a8adcafb9fab2dae0e03109552bd78f78311a155440b5a6b802ad8201f667f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d4f95d24c41058b1f35927f574ce762cda6df949757fe8e83f65a64bde52c12","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d4f95d24c41058b1f35927f574ce762cda6df949757fe8e83f65a64bde52c12"} {"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d4f95d24c41058b1f35927f574ce762cda6df949757fe8e83f65a64bde52c12","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88a8adcafb9fab2dae0e03109552bd78f78311a155440b5a6b802ad8201f667f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d4f95d24c41058b1f35927f574ce762cda6df949757fe8e83f65a64bde52c12","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3d4f95d24c41058b1f35927f574ce762cda6df949757fe8e83f65a64bde52c12"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d4f95d24c41058b1f35927f574ce762cda6df949757fe8e83f65a64bde52c12","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d4f95d24c41058b1f35927f574ce762cda6df949757fe8e83f65a64bde52c12","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3d4f95d24c41058b1f35927f574ce762cda6df949757fe8e83f65a64bde52c12"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88a8adcafb9fab2dae0e03109552bd78f78311a155440b5a6b802ad8201f667f"} {"level":"error","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3d4f95d24c41058b1f35927f574ce762cda6df949757fe8e83f65a64bde52c12","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3d4f95d24c41058b1f35927f574ce762cda6df949757fe8e83f65a64bde52c12\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88a8adcafb9fab2dae0e03109552bd78f78311a155440b5a6b802ad8201f667f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["88a8adcafb9fab2dae0e03109552bd78f78311a155440b5a6b802ad8201f667f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88a8adcafb9fab2dae0e03109552bd78f78311a155440b5a6b802ad8201f667f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d4f95d24c41058b1f35927f574ce762cda6df949757fe8e83f65a64bde52c12","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d4f95d24c41058b1f35927f574ce762cda6df949757fe8e83f65a64bde52c12"} {"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d4f95d24c41058b1f35927f574ce762cda6df949757fe8e83f65a64bde52c12","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9fb0137e5bd595a803a95a1e83c266a386dfbc91f102c161c55efcaedb0a997d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9fb0137e5bd595a803a95a1e83c266a386dfbc91f102c161c55efcaedb0a997d"} {"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9fb0137e5bd595a803a95a1e83c266a386dfbc91f102c161c55efcaedb0a997d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88a8adcafb9fab2dae0e03109552bd78f78311a155440b5a6b802ad8201f667f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88a8adcafb9fab2dae0e03109552bd78f78311a155440b5a6b802ad8201f667f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d4f95d24c41058b1f35927f574ce762cda6df949757fe8e83f65a64bde52c12","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3d4f95d24c41058b1f35927f574ce762cda6df949757fe8e83f65a64bde52c12"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88a8adcafb9fab2dae0e03109552bd78f78311a155440b5a6b802ad8201f667f"} {"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d4f95d24c41058b1f35927f574ce762cda6df949757fe8e83f65a64bde52c12","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9fb0137e5bd595a803a95a1e83c266a386dfbc91f102c161c55efcaedb0a997d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9fb0137e5bd595a803a95a1e83c266a386dfbc91f102c161c55efcaedb0a997d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9fb0137e5bd595a803a95a1e83c266a386dfbc91f102c161c55efcaedb0a997d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88a8adcafb9fab2dae0e03109552bd78f78311a155440b5a6b802ad8201f667f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["88a8adcafb9fab2dae0e03109552bd78f78311a155440b5a6b802ad8201f667f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d4f95d24c41058b1f35927f574ce762cda6df949757fe8e83f65a64bde52c12"} {"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88a8adcafb9fab2dae0e03109552bd78f78311a155440b5a6b802ad8201f667f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d4f95d24c41058b1f35927f574ce762cda6df949757fe8e83f65a64bde52c12","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9fb0137e5bd595a803a95a1e83c266a386dfbc91f102c161c55efcaedb0a997d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9fb0137e5bd595a803a95a1e83c266a386dfbc91f102c161c55efcaedb0a997d"} {"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9fb0137e5bd595a803a95a1e83c266a386dfbc91f102c161c55efcaedb0a997d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88a8adcafb9fab2dae0e03109552bd78f78311a155440b5a6b802ad8201f667f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88a8adcafb9fab2dae0e03109552bd78f78311a155440b5a6b802ad8201f667f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04b945cac04faba3e26bf6761cd60ace97350ba582ce5f68639e9d13817604a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88a8adcafb9fab2dae0e03109552bd78f78311a155440b5a6b802ad8201f667f"} {"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04b945cac04faba3e26bf6761cd60ace97350ba582ce5f68639e9d13817604a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9fb0137e5bd595a803a95a1e83c266a386dfbc91f102c161c55efcaedb0a997d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9fb0137e5bd595a803a95a1e83c266a386dfbc91f102c161c55efcaedb0a997d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d4f95d24c41058b1f35927f574ce762cda6df949757fe8e83f65a64bde52c12"} {"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9fb0137e5bd595a803a95a1e83c266a386dfbc91f102c161c55efcaedb0a997d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e44e4af7af649fddca96a5066a040c1ab0d995cb1944e1b7e0f088606f4c069","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e44e4af7af649fddca96a5066a040c1ab0d995cb1944e1b7e0f088606f4c069","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88a8adcafb9fab2dae0e03109552bd78f78311a155440b5a6b802ad8201f667f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["88a8adcafb9fab2dae0e03109552bd78f78311a155440b5a6b802ad8201f667f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04b945cac04faba3e26bf6761cd60ace97350ba582ce5f68639e9d13817604a5"} {"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88a8adcafb9fab2dae0e03109552bd78f78311a155440b5a6b802ad8201f667f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04b945cac04faba3e26bf6761cd60ace97350ba582ce5f68639e9d13817604a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["04b945cac04faba3e26bf6761cd60ace97350ba582ce5f68639e9d13817604a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04b945cac04faba3e26bf6761cd60ace97350ba582ce5f68639e9d13817604a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9fb0137e5bd595a803a95a1e83c266a386dfbc91f102c161c55efcaedb0a997d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9fb0137e5bd595a803a95a1e83c266a386dfbc91f102c161c55efcaedb0a997d"} {"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9fb0137e5bd595a803a95a1e83c266a386dfbc91f102c161c55efcaedb0a997d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e44e4af7af649fddca96a5066a040c1ab0d995cb1944e1b7e0f088606f4c069","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e44e4af7af649fddca96a5066a040c1ab0d995cb1944e1b7e0f088606f4c069"} {"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e44e4af7af649fddca96a5066a040c1ab0d995cb1944e1b7e0f088606f4c069","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88a8adcafb9fab2dae0e03109552bd78f78311a155440b5a6b802ad8201f667f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88a8adcafb9fab2dae0e03109552bd78f78311a155440b5a6b802ad8201f667f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04b945cac04faba3e26bf6761cd60ace97350ba582ce5f68639e9d13817604a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9fb0137e5bd595a803a95a1e83c266a386dfbc91f102c161c55efcaedb0a997d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9fb0137e5bd595a803a95a1e83c266a386dfbc91f102c161c55efcaedb0a997d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88a8adcafb9fab2dae0e03109552bd78f78311a155440b5a6b802ad8201f667f"} {"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9fb0137e5bd595a803a95a1e83c266a386dfbc91f102c161c55efcaedb0a997d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e44e4af7af649fddca96a5066a040c1ab0d995cb1944e1b7e0f088606f4c069","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6e44e4af7af649fddca96a5066a040c1ab0d995cb1944e1b7e0f088606f4c069"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04b945cac04faba3e26bf6761cd60ace97350ba582ce5f68639e9d13817604a5"} {"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e44e4af7af649fddca96a5066a040c1ab0d995cb1944e1b7e0f088606f4c069","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88a8adcafb9fab2dae0e03109552bd78f78311a155440b5a6b802ad8201f667f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["88a8adcafb9fab2dae0e03109552bd78f78311a155440b5a6b802ad8201f667f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88a8adcafb9fab2dae0e03109552bd78f78311a155440b5a6b802ad8201f667f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9fb0137e5bd595a803a95a1e83c266a386dfbc91f102c161c55efcaedb0a997d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9fb0137e5bd595a803a95a1e83c266a386dfbc91f102c161c55efcaedb0a997d"} {"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9fb0137e5bd595a803a95a1e83c266a386dfbc91f102c161c55efcaedb0a997d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e44e4af7af649fddca96a5066a040c1ab0d995cb1944e1b7e0f088606f4c069","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e44e4af7af649fddca96a5066a040c1ab0d995cb1944e1b7e0f088606f4c069","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88a8adcafb9fab2dae0e03109552bd78f78311a155440b5a6b802ad8201f667f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9fb0137e5bd595a803a95a1e83c266a386dfbc91f102c161c55efcaedb0a997d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9fb0137e5bd595a803a95a1e83c266a386dfbc91f102c161c55efcaedb0a997d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e44e4af7af649fddca96a5066a040c1ab0d995cb1944e1b7e0f088606f4c069"} {"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9fb0137e5bd595a803a95a1e83c266a386dfbc91f102c161c55efcaedb0a997d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e44e4af7af649fddca96a5066a040c1ab0d995cb1944e1b7e0f088606f4c069","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6e44e4af7af649fddca96a5066a040c1ab0d995cb1944e1b7e0f088606f4c069"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88a8adcafb9fab2dae0e03109552bd78f78311a155440b5a6b802ad8201f667f"} {"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e44e4af7af649fddca96a5066a040c1ab0d995cb1944e1b7e0f088606f4c069","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41c10c07b351be36e5dde755b6bcc8cff7198361e47237b63fb5e282a965ab22","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9fb0137e5bd595a803a95a1e83c266a386dfbc91f102c161c55efcaedb0a997d"} {"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41c10c07b351be36e5dde755b6bcc8cff7198361e47237b63fb5e282a965ab22","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9fb0137e5bd595a803a95a1e83c266a386dfbc91f102c161c55efcaedb0a997d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e44e4af7af649fddca96a5066a040c1ab0d995cb1944e1b7e0f088606f4c069","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e44e4af7af649fddca96a5066a040c1ab0d995cb1944e1b7e0f088606f4c069","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"41c10c07b351be36e5dde755b6bcc8cff7198361e47237b63fb5e282a965ab22","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e44e4af7af649fddca96a5066a040c1ab0d995cb1944e1b7e0f088606f4c069","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e44e4af7af649fddca96a5066a040c1ab0d995cb1944e1b7e0f088606f4c069"} {"level":"debug","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e44e4af7af649fddca96a5066a040c1ab0d995cb1944e1b7e0f088606f4c069","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6e44e4af7af649fddca96a5066a040c1ab0d995cb1944e1b7e0f088606f4c069"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e44e4af7af649fddca96a5066a040c1ab0d995cb1944e1b7e0f088606f4c069","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41c10c07b351be36e5dde755b6bcc8cff7198361e47237b63fb5e282a965ab22","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41c10c07b351be36e5dde755b6bcc8cff7198361e47237b63fb5e282a965ab22"} {"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41c10c07b351be36e5dde755b6bcc8cff7198361e47237b63fb5e282a965ab22","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e44e4af7af649fddca96a5066a040c1ab0d995cb1944e1b7e0f088606f4c069","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e44e4af7af649fddca96a5066a040c1ab0d995cb1944e1b7e0f088606f4c069","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41c10c07b351be36e5dde755b6bcc8cff7198361e47237b63fb5e282a965ab22","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["41c10c07b351be36e5dde755b6bcc8cff7198361e47237b63fb5e282a965ab22"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e44e4af7af649fddca96a5066a040c1ab0d995cb1944e1b7e0f088606f4c069"} {"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41c10c07b351be36e5dde755b6bcc8cff7198361e47237b63fb5e282a965ab22","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e44e4af7af649fddca96a5066a040c1ab0d995cb1944e1b7e0f088606f4c069","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6e44e4af7af649fddca96a5066a040c1ab0d995cb1944e1b7e0f088606f4c069"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41c10c07b351be36e5dde755b6bcc8cff7198361e47237b63fb5e282a965ab22"} {"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e44e4af7af649fddca96a5066a040c1ab0d995cb1944e1b7e0f088606f4c069","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"41c10c07b351be36e5dde755b6bcc8cff7198361e47237b63fb5e282a965ab22","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e44e4af7af649fddca96a5066a040c1ab0d995cb1944e1b7e0f088606f4c069","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e44e4af7af649fddca96a5066a040c1ab0d995cb1944e1b7e0f088606f4c069","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e44e4af7af649fddca96a5066a040c1ab0d995cb1944e1b7e0f088606f4c069","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e44e4af7af649fddca96a5066a040c1ab0d995cb1944e1b7e0f088606f4c069","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e44e4af7af649fddca96a5066a040c1ab0d995cb1944e1b7e0f088606f4c069"} {"level":"debug","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e44e4af7af649fddca96a5066a040c1ab0d995cb1944e1b7e0f088606f4c069","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6e44e4af7af649fddca96a5066a040c1ab0d995cb1944e1b7e0f088606f4c069"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e44e4af7af649fddca96a5066a040c1ab0d995cb1944e1b7e0f088606f4c069","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e44e4af7af649fddca96a5066a040c1ab0d995cb1944e1b7e0f088606f4c069","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41c10c07b351be36e5dde755b6bcc8cff7198361e47237b63fb5e282a965ab22"} {"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e44e4af7af649fddca96a5066a040c1ab0d995cb1944e1b7e0f088606f4c069"} {"level":"debug","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3bd103f06a112f86835c9ee3e7306de3496700f2011513b30a27af7734882301","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3bd103f06a112f86835c9ee3e7306de3496700f2011513b30a27af7734882301","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3bd103f06a112f86835c9ee3e7306de3496700f2011513b30a27af7734882301","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3bd103f06a112f86835c9ee3e7306de3496700f2011513b30a27af7734882301","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3bd103f06a112f86835c9ee3e7306de3496700f2011513b30a27af7734882301"} {"level":"debug","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3bd103f06a112f86835c9ee3e7306de3496700f2011513b30a27af7734882301","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3bd103f06a112f86835c9ee3e7306de3496700f2011513b30a27af7734882301"} {"level":"debug","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3bd103f06a112f86835c9ee3e7306de3496700f2011513b30a27af7734882301","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3bd103f06a112f86835c9ee3e7306de3496700f2011513b30a27af7734882301"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3bd103f06a112f86835c9ee3e7306de3496700f2011513b30a27af7734882301","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3bd103f06a112f86835c9ee3e7306de3496700f2011513b30a27af7734882301","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3bd103f06a112f86835c9ee3e7306de3496700f2011513b30a27af7734882301"} {"level":"debug","ts":"2026-07-13T21:54:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a25e2e1317d805f8e33f006891214628a48694b17b3f066113ea27ed0f3005a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:54:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:54:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:54:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a25e2e1317d805f8e33f006891214628a48694b17b3f066113ea27ed0f3005a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:54:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a25e2e1317d805f8e33f006891214628a48694b17b3f066113ea27ed0f3005a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:54:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a25e2e1317d805f8e33f006891214628a48694b17b3f066113ea27ed0f3005a4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:54:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a25e2e1317d805f8e33f006891214628a48694b17b3f066113ea27ed0f3005a4"} {"level":"debug","ts":"2026-07-13T21:54:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a25e2e1317d805f8e33f006891214628a48694b17b3f066113ea27ed0f3005a4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:54:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a25e2e1317d805f8e33f006891214628a48694b17b3f066113ea27ed0f3005a4"} {"level":"debug","ts":"2026-07-13T21:54:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a25e2e1317d805f8e33f006891214628a48694b17b3f066113ea27ed0f3005a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:54:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:54:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a25e2e1317d805f8e33f006891214628a48694b17b3f066113ea27ed0f3005a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:54:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a25e2e1317d805f8e33f006891214628a48694b17b3f066113ea27ed0f3005a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:54:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a25e2e1317d805f8e33f006891214628a48694b17b3f066113ea27ed0f3005a4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:54:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a25e2e1317d805f8e33f006891214628a48694b17b3f066113ea27ed0f3005a4"} {"level":"debug","ts":"2026-07-13T21:54:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04b945cac04faba3e26bf6761cd60ace97350ba582ce5f68639e9d13817604a5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:54:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04b945cac04faba3e26bf6761cd60ace97350ba582ce5f68639e9d13817604a5"} {"level":"debug","ts":"2026-07-13T21:54:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"59fd6f75af8efa0ea3c760437ac095201bc9397336cc36c830ee37a9f27524fb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:54:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59fd6f75af8efa0ea3c760437ac095201bc9397336cc36c830ee37a9f27524fb"} {"level":"debug","ts":"2026-07-13T21:54:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d99619663c9e99ed2b4eab5fdaa2776ae3cb7de53d501eed7801d313a819e5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:54:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:54:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:54:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d99619663c9e99ed2b4eab5fdaa2776ae3cb7de53d501eed7801d313a819e5a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:54:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d99619663c9e99ed2b4eab5fdaa2776ae3cb7de53d501eed7801d313a819e5a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:54:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d99619663c9e99ed2b4eab5fdaa2776ae3cb7de53d501eed7801d313a819e5a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:54:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d99619663c9e99ed2b4eab5fdaa2776ae3cb7de53d501eed7801d313a819e5a"} {"level":"debug","ts":"2026-07-13T21:54:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d99619663c9e99ed2b4eab5fdaa2776ae3cb7de53d501eed7801d313a819e5a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:54:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d99619663c9e99ed2b4eab5fdaa2776ae3cb7de53d501eed7801d313a819e5a"} {"level":"debug","ts":"2026-07-13T21:54:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d99619663c9e99ed2b4eab5fdaa2776ae3cb7de53d501eed7801d313a819e5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:54:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:54:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3d99619663c9e99ed2b4eab5fdaa2776ae3cb7de53d501eed7801d313a819e5a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:54:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d99619663c9e99ed2b4eab5fdaa2776ae3cb7de53d501eed7801d313a819e5a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:54:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d99619663c9e99ed2b4eab5fdaa2776ae3cb7de53d501eed7801d313a819e5a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:54:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"407be41904019b18b50107a0a97b06c04b484a47240e0d114cc0dd8717c86ffd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:54:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d99619663c9e99ed2b4eab5fdaa2776ae3cb7de53d501eed7801d313a819e5a"} {"level":"info","ts":"2026-07-13T21:54:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/407be41904019b18b50107a0a97b06c04b484a47240e0d114cc0dd8717c86ffd"} {"level":"debug","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88a8adcafb9fab2dae0e03109552bd78f78311a155440b5a6b802ad8201f667f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:54:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:54:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88a8adcafb9fab2dae0e03109552bd78f78311a155440b5a6b802ad8201f667f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88a8adcafb9fab2dae0e03109552bd78f78311a155440b5a6b802ad8201f667f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88a8adcafb9fab2dae0e03109552bd78f78311a155440b5a6b802ad8201f667f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88a8adcafb9fab2dae0e03109552bd78f78311a155440b5a6b802ad8201f667f"} {"level":"debug","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88a8adcafb9fab2dae0e03109552bd78f78311a155440b5a6b802ad8201f667f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88a8adcafb9fab2dae0e03109552bd78f78311a155440b5a6b802ad8201f667f"} {"level":"debug","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88a8adcafb9fab2dae0e03109552bd78f78311a155440b5a6b802ad8201f667f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:54:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:54:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["88a8adcafb9fab2dae0e03109552bd78f78311a155440b5a6b802ad8201f667f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88a8adcafb9fab2dae0e03109552bd78f78311a155440b5a6b802ad8201f667f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88a8adcafb9fab2dae0e03109552bd78f78311a155440b5a6b802ad8201f667f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:54:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:54:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88a8adcafb9fab2dae0e03109552bd78f78311a155440b5a6b802ad8201f667f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d4f95d24c41058b1f35927f574ce762cda6df949757fe8e83f65a64bde52c12","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88a8adcafb9fab2dae0e03109552bd78f78311a155440b5a6b802ad8201f667f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88a8adcafb9fab2dae0e03109552bd78f78311a155440b5a6b802ad8201f667f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88a8adcafb9fab2dae0e03109552bd78f78311a155440b5a6b802ad8201f667f"} {"level":"debug","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88a8adcafb9fab2dae0e03109552bd78f78311a155440b5a6b802ad8201f667f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:54:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:54:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["88a8adcafb9fab2dae0e03109552bd78f78311a155440b5a6b802ad8201f667f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d4f95d24c41058b1f35927f574ce762cda6df949757fe8e83f65a64bde52c12"} {"level":"info","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88a8adcafb9fab2dae0e03109552bd78f78311a155440b5a6b802ad8201f667f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88a8adcafb9fab2dae0e03109552bd78f78311a155440b5a6b802ad8201f667f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:54:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:54:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88a8adcafb9fab2dae0e03109552bd78f78311a155440b5a6b802ad8201f667f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88a8adcafb9fab2dae0e03109552bd78f78311a155440b5a6b802ad8201f667f"} {"level":"debug","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88a8adcafb9fab2dae0e03109552bd78f78311a155440b5a6b802ad8201f667f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88a8adcafb9fab2dae0e03109552bd78f78311a155440b5a6b802ad8201f667f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88a8adcafb9fab2dae0e03109552bd78f78311a155440b5a6b802ad8201f667f"} {"level":"debug","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88a8adcafb9fab2dae0e03109552bd78f78311a155440b5a6b802ad8201f667f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:54:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:54:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["88a8adcafb9fab2dae0e03109552bd78f78311a155440b5a6b802ad8201f667f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88a8adcafb9fab2dae0e03109552bd78f78311a155440b5a6b802ad8201f667f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3fff53257286e7107f76d02468c3f2017866329555fe3bc0bbeefe1dc4f44dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:54:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:54:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3fff53257286e7107f76d02468c3f2017866329555fe3bc0bbeefe1dc4f44dc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88a8adcafb9fab2dae0e03109552bd78f78311a155440b5a6b802ad8201f667f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b20bae1e4bd781d8950d5e72217c4e558adf27bdf23f993f25b5c17e51a311b3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3fff53257286e7107f76d02468c3f2017866329555fe3bc0bbeefe1dc4f44dc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3fff53257286e7107f76d02468c3f2017866329555fe3bc0bbeefe1dc4f44dc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3fff53257286e7107f76d02468c3f2017866329555fe3bc0bbeefe1dc4f44dc"} {"level":"debug","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3fff53257286e7107f76d02468c3f2017866329555fe3bc0bbeefe1dc4f44dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:54:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:54:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f3fff53257286e7107f76d02468c3f2017866329555fe3bc0bbeefe1dc4f44dc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88a8adcafb9fab2dae0e03109552bd78f78311a155440b5a6b802ad8201f667f"} {"level":"info","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3fff53257286e7107f76d02468c3f2017866329555fe3bc0bbeefe1dc4f44dc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3fff53257286e7107f76d02468c3f2017866329555fe3bc0bbeefe1dc4f44dc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b20bae1e4bd781d8950d5e72217c4e558adf27bdf23f993f25b5c17e51a311b3"} {"level":"info","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3fff53257286e7107f76d02468c3f2017866329555fe3bc0bbeefe1dc4f44dc"} {"level":"debug","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b459e4e4da021b8e10954318368e9d1bae89a6f48d01d6c57ed0ee7918378830","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:54:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:54:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b459e4e4da021b8e10954318368e9d1bae89a6f48d01d6c57ed0ee7918378830","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b459e4e4da021b8e10954318368e9d1bae89a6f48d01d6c57ed0ee7918378830","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b459e4e4da021b8e10954318368e9d1bae89a6f48d01d6c57ed0ee7918378830","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b459e4e4da021b8e10954318368e9d1bae89a6f48d01d6c57ed0ee7918378830"} {"level":"debug","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b459e4e4da021b8e10954318368e9d1bae89a6f48d01d6c57ed0ee7918378830","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b459e4e4da021b8e10954318368e9d1bae89a6f48d01d6c57ed0ee7918378830"} {"level":"debug","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b459e4e4da021b8e10954318368e9d1bae89a6f48d01d6c57ed0ee7918378830","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:54:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:54:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b459e4e4da021b8e10954318368e9d1bae89a6f48d01d6c57ed0ee7918378830"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b459e4e4da021b8e10954318368e9d1bae89a6f48d01d6c57ed0ee7918378830","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b459e4e4da021b8e10954318368e9d1bae89a6f48d01d6c57ed0ee7918378830","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:54:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:54:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b459e4e4da021b8e10954318368e9d1bae89a6f48d01d6c57ed0ee7918378830","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"347d16811a3d165a7a404ac6723ca8ba73ef2c4756d6fb5e070867a32504d765","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b459e4e4da021b8e10954318368e9d1bae89a6f48d01d6c57ed0ee7918378830","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b459e4e4da021b8e10954318368e9d1bae89a6f48d01d6c57ed0ee7918378830","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35577edf4630bc48d06493e7281d83c6eb852165d309a44b184f6fc868204f81","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b459e4e4da021b8e10954318368e9d1bae89a6f48d01d6c57ed0ee7918378830"} {"level":"debug","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b459e4e4da021b8e10954318368e9d1bae89a6f48d01d6c57ed0ee7918378830","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:54:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:54:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b459e4e4da021b8e10954318368e9d1bae89a6f48d01d6c57ed0ee7918378830"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/347d16811a3d165a7a404ac6723ca8ba73ef2c4756d6fb5e070867a32504d765"} {"level":"info","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b459e4e4da021b8e10954318368e9d1bae89a6f48d01d6c57ed0ee7918378830","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b459e4e4da021b8e10954318368e9d1bae89a6f48d01d6c57ed0ee7918378830","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35577edf4630bc48d06493e7281d83c6eb852165d309a44b184f6fc868204f81"} {"level":"info","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b459e4e4da021b8e10954318368e9d1bae89a6f48d01d6c57ed0ee7918378830"} {"level":"debug","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63d22a632d565b81e66c2bd3987541cebcb00579635ce9bc25e1bfa22cb008e8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9c588a307ba8480921ac9347fd526993aa73c32e5e4813a434bd200d3c318e5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63d22a632d565b81e66c2bd3987541cebcb00579635ce9bc25e1bfa22cb008e8"} {"level":"info","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9c588a307ba8480921ac9347fd526993aa73c32e5e4813a434bd200d3c318e5"} {"level":"debug","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1ddf439da31a95eed789cc4080951b0c54179101505c1c74341d58ad75632dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:54:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:54:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1ddf439da31a95eed789cc4080951b0c54179101505c1c74341d58ad75632dd"} {"level":"info","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1ddf439da31a95eed789cc4080951b0c54179101505c1c74341d58ad75632dd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c1ddf439da31a95eed789cc4080951b0c54179101505c1c74341d58ad75632dd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c1ddf439da31a95eed789cc4080951b0c54179101505c1c74341d58ad75632dd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1ddf439da31a95eed789cc4080951b0c54179101505c1c74341d58ad75632dd"} {"level":"debug","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1ddf439da31a95eed789cc4080951b0c54179101505c1c74341d58ad75632dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:54:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:54:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c1ddf439da31a95eed789cc4080951b0c54179101505c1c74341d58ad75632dd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1ddf439da31a95eed789cc4080951b0c54179101505c1c74341d58ad75632dd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43a20a1a2d3fcc704a4a1e0f86d9efc2ba06e0f0333e5705592f8920362794c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:54:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:54:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43a20a1a2d3fcc704a4a1e0f86d9efc2ba06e0f0333e5705592f8920362794c8"} {"level":"info","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43a20a1a2d3fcc704a4a1e0f86d9efc2ba06e0f0333e5705592f8920362794c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1ddf439da31a95eed789cc4080951b0c54179101505c1c74341d58ad75632dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:54:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:54:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1ddf439da31a95eed789cc4080951b0c54179101505c1c74341d58ad75632dd"} {"level":"info","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1ddf439da31a95eed789cc4080951b0c54179101505c1c74341d58ad75632dd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d85ea6aaa6a2ac5985407e9d46fe00a2bb4ba2e11ca2b8477df8f72c34b02b0d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:54:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:54:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d85ea6aaa6a2ac5985407e9d46fe00a2bb4ba2e11ca2b8477df8f72c34b02b0d"} {"level":"info","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d85ea6aaa6a2ac5985407e9d46fe00a2bb4ba2e11ca2b8477df8f72c34b02b0d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43a20a1a2d3fcc704a4a1e0f86d9efc2ba06e0f0333e5705592f8920362794c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1ddf439da31a95eed789cc4080951b0c54179101505c1c74341d58ad75632dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:54:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:54:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c1ddf439da31a95eed789cc4080951b0c54179101505c1c74341d58ad75632dd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43a20a1a2d3fcc704a4a1e0f86d9efc2ba06e0f0333e5705592f8920362794c8"} {"level":"info","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1ddf439da31a95eed789cc4080951b0c54179101505c1c74341d58ad75632dd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a25e2e1317d805f8e33f006891214628a48694b17b3f066113ea27ed0f3005a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d85ea6aaa6a2ac5985407e9d46fe00a2bb4ba2e11ca2b8477df8f72c34b02b0d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:54:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:54:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d85ea6aaa6a2ac5985407e9d46fe00a2bb4ba2e11ca2b8477df8f72c34b02b0d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d85ea6aaa6a2ac5985407e9d46fe00a2bb4ba2e11ca2b8477df8f72c34b02b0d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9128a210da07d7ffc14e5b259b6d1258d6b31b2995a15e3fecb9c2ac159c4446","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43a20a1a2d3fcc704a4a1e0f86d9efc2ba06e0f0333e5705592f8920362794c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:54:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:54:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["43a20a1a2d3fcc704a4a1e0f86d9efc2ba06e0f0333e5705592f8920362794c8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1ddf439da31a95eed789cc4080951b0c54179101505c1c74341d58ad75632dd"} {"level":"info","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43a20a1a2d3fcc704a4a1e0f86d9efc2ba06e0f0333e5705592f8920362794c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c1ddf439da31a95eed789cc4080951b0c54179101505c1c74341d58ad75632dd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9fb0137e5bd595a803a95a1e83c266a386dfbc91f102c161c55efcaedb0a997d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d85ea6aaa6a2ac5985407e9d46fe00a2bb4ba2e11ca2b8477df8f72c34b02b0d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c82a891cbdf2bd849d194107bab0b8395b3e629ea1b6cb45e3180e70fb5e56f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43a20a1a2d3fcc704a4a1e0f86d9efc2ba06e0f0333e5705592f8920362794c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e44e4af7af649fddca96a5066a040c1ab0d995cb1944e1b7e0f088606f4c069","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a25e2e1317d805f8e33f006891214628a48694b17b3f066113ea27ed0f3005a4"} {"level":"debug","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1bec6e8829fc8d29f2c64c6e514ab8aa1aad2ecf77437c6421fc0971515f0c9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d85ea6aaa6a2ac5985407e9d46fe00a2bb4ba2e11ca2b8477df8f72c34b02b0d"} {"level":"info","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9128a210da07d7ffc14e5b259b6d1258d6b31b2995a15e3fecb9c2ac159c4446"} {"level":"debug","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"41c10c07b351be36e5dde755b6bcc8cff7198361e47237b63fb5e282a965ab22","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3bd103f06a112f86835c9ee3e7306de3496700f2011513b30a27af7734882301","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9fb0137e5bd595a803a95a1e83c266a386dfbc91f102c161c55efcaedb0a997d"} {"level":"info","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1ddf439da31a95eed789cc4080951b0c54179101505c1c74341d58ad75632dd"} {"level":"info","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c82a891cbdf2bd849d194107bab0b8395b3e629ea1b6cb45e3180e70fb5e56f0"} {"level":"info","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43a20a1a2d3fcc704a4a1e0f86d9efc2ba06e0f0333e5705592f8920362794c8"} {"level":"info","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e44e4af7af649fddca96a5066a040c1ab0d995cb1944e1b7e0f088606f4c069"} {"level":"info","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1bec6e8829fc8d29f2c64c6e514ab8aa1aad2ecf77437c6421fc0971515f0c9"} {"level":"info","ts":"2026-07-13T21:54:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41c10c07b351be36e5dde755b6bcc8cff7198361e47237b63fb5e282a965ab22"} {"level":"info","ts":"2026-07-13T21:54:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3bd103f06a112f86835c9ee3e7306de3496700f2011513b30a27af7734882301"} {"level":"info","ts":"2026-07-13T21:54:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"27976e19-0d50-46a2-867a-885ef26b7a01","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:55034","PortSpecifier":{"PortValue":55034}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"27976e19-0d50-46a2-867a-885ef26b7a01","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8e2974.apps.294019ed-43ef-46f4-a4ce-c5c88067cb0f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-13T21:54:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"27976e19-0d50-46a2-867a-885ef26b7a01","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:55034","PortSpecifier":{"PortValue":55034}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783979698,"nanos":598785353},"http":{"id":"27976e19-0d50-46a2-867a-885ef26b7a01","method":"POST","headers":{":authority":"e2e-shared-a-8e2974.apps.294019ed-43ef-46f4-a4ce-c5c88067cb0f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T21:54:58Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"27976e19-0d50-46a2-867a-885ef26b7a01","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-13T21:54:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"27976e19-0d50-46a2-867a-885ef26b7a01","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b62e8f90-7460-4bb9-9510-7f1180036f2d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=817b74d9-4ac4-4f4d-b17a-056132976a9e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c5c88067cb0f"]}} {"level":"debug","ts":"2026-07-13T21:54:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"27976e19-0d50-46a2-867a-885ef26b7a01","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c5c88067cb0f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=817b74d9-4ac4-4f4d-b17a-056132976a9e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b62e8f90-7460-4bb9-9510-7f1180036f2d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"407be41904019b18b50107a0a97b06c04b484a47240e0d114cc0dd8717c86ffd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8e2974.apps.294019ed-43ef-46f4-a4ce-c5c88067cb0f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T21:54:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"27976e19-0d50-46a2-867a-885ef26b7a01","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T21:54:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"27976e19-0d50-46a2-867a-885ef26b7a01","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T21:54:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"27976e19-0d50-46a2-867a-885ef26b7a01","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8e2974/rate-test-model-8e2974\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T21:54:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"27976e19-0d50-46a2-867a-885ef26b7a01","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-13T21:54:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"27976e19-0d50-46a2-867a-885ef26b7a01","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-13T21:54:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"27976e19-0d50-46a2-867a-885ef26b7a01","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-13T21:54:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"27976e19-0d50-46a2-867a-885ef26b7a01","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-13T21:54:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"27976e19-0d50-46a2-867a-885ef26b7a01","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-13T21:54:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"501c0f00-2a8e-4b7d-a232-9bd63520eb45","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:52334","PortSpecifier":{"PortValue":52334}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"501c0f00-2a8e-4b7d-a232-9bd63520eb45","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-884921.apps.294019ed-43ef-46f4-a4ce-c5c88067cb0f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-13T21:54:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"501c0f00-2a8e-4b7d-a232-9bd63520eb45","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:52334","PortSpecifier":{"PortValue":52334}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783979698,"nanos":635872378},"http":{"id":"501c0f00-2a8e-4b7d-a232-9bd63520eb45","method":"POST","headers":{":authority":"e2e-shared-b-884921.apps.294019ed-43ef-46f4-a4ce-c5c88067cb0f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T21:54:58Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"501c0f00-2a8e-4b7d-a232-9bd63520eb45","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-13T21:54:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"501c0f00-2a8e-4b7d-a232-9bd63520eb45","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b62e8f90-7460-4bb9-9510-7f1180036f2d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=817b74d9-4ac4-4f4d-b17a-056132976a9e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c5c88067cb0f"]}} {"level":"debug","ts":"2026-07-13T21:54:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"501c0f00-2a8e-4b7d-a232-9bd63520eb45","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c5c88067cb0f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=817b74d9-4ac4-4f4d-b17a-056132976a9e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b62e8f90-7460-4bb9-9510-7f1180036f2d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d9c588a307ba8480921ac9347fd526993aa73c32e5e4813a434bd200d3c318e5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-884921.apps.294019ed-43ef-46f4-a4ce-c5c88067cb0f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T21:54:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"501c0f00-2a8e-4b7d-a232-9bd63520eb45","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T21:54:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"501c0f00-2a8e-4b7d-a232-9bd63520eb45","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T21:54:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"501c0f00-2a8e-4b7d-a232-9bd63520eb45","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-884921/rate-test-model-884921\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T21:54:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"501c0f00-2a8e-4b7d-a232-9bd63520eb45","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-13T21:54:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"501c0f00-2a8e-4b7d-a232-9bd63520eb45","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-13T21:54:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"501c0f00-2a8e-4b7d-a232-9bd63520eb45","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-13T21:54:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"501c0f00-2a8e-4b7d-a232-9bd63520eb45","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-13T21:54:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"501c0f00-2a8e-4b7d-a232-9bd63520eb45","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-13T21:54:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f9d64570-313f-4780-8102-40d319afe10f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:55046","PortSpecifier":{"PortValue":55046}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f9d64570-313f-4780-8102-40d319afe10f","method":"POST","path":"/ai-tenant-e2e-shared-a-8e2974/rate-test-model-8e2974/v1/completions","host":"e2e-shared-a-8e2974.apps.294019ed-43ef-46f4-a4ce-c5c88067cb0f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-13T21:54:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f9d64570-313f-4780-8102-40d319afe10f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:55046","PortSpecifier":{"PortValue":55046}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783979698,"nanos":669921437},"http":{"id":"f9d64570-313f-4780-8102-40d319afe10f","method":"POST","headers":{":authority":"e2e-shared-a-8e2974.apps.294019ed-43ef-46f4-a4ce-c5c88067cb0f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8e2974/rate-test-model-8e2974/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T21:54:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f9d64570-313f-4780-8102-40d319afe10f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-7o1pLW17euaRkJVS_3iWw0OTCSZijHEetvz4y1QZNE4WsBE8Qr5TjPdcSUU1"} {"level":"debug","ts":"2026-07-13T21:54:58Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f9d64570-313f-4780-8102-40d319afe10f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8e2974.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-7o1pLW17euaRkJVS_3iWw0OTCSZijHEetvz4y1QZNE4WsBE8Qr5TjPdcSUU1\"}"} {"level":"debug","ts":"2026-07-13T21:54:58Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f9d64570-313f-4780-8102-40d319afe10f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8e2974.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d43819f4-b469-4cbf-ab1f-5ebc56acf6a4","keyName":"e2e-rate-a-9c8e9c","subscription":"e2e-rate-iso-a-9c8e9c","tenant":"e2e-shared-a-8e2974","userId":"d43819f4-b469-4cbf-ab1f-5ebc56acf6a4","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-13T21:54:58Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f9d64570-313f-4780-8102-40d319afe10f","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8e2974.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8e2974/rate-test-model-8e2974\",\"requestedSubscription\":\"e2e-rate-iso-a-9c8e9c\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-13T21:54:58Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f9d64570-313f-4780-8102-40d319afe10f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8e2974.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8e2974","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9c8e9c","namespace":"ai-tenant-e2e-shared-a-8e2974","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-13T21:54:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f9d64570-313f-4780-8102-40d319afe10f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T21:54:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f9d64570-313f-4780-8102-40d319afe10f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T21:54:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f9d64570-313f-4780-8102-40d319afe10f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T21:54:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f9d64570-313f-4780-8102-40d319afe10f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8e2974/rate-test-model-8e2974\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T21:54:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f9d64570-313f-4780-8102-40d319afe10f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T21:54:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f9d64570-313f-4780-8102-40d319afe10f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-13T21:54:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f9d64570-313f-4780-8102-40d319afe10f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-9c8e9c"} {"level":"debug","ts":"2026-07-13T21:54:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f9d64570-313f-4780-8102-40d319afe10f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-13T21:54:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f9d64570-313f-4780-8102-40d319afe10f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d43819f4-b469-4cbf-ab1f-5ebc56acf6a4","keyName":"e2e-rate-a-9c8e9c","selected_subscription":"e2e-rate-iso-a-9c8e9c","selected_subscription_key":"ai-tenant-e2e-shared-a-8e2974/e2e-rate-iso-a-9c8e9c@ai-tenant-e2e-shared-a-8e2974/rate-test-model-8e2974","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8e2974","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9c8e9c","namespace":"ai-tenant-e2e-shared-a-8e2974","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-13T21:54:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f9d64570-313f-4780-8102-40d319afe10f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-13T21:54:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f9d64570-313f-4780-8102-40d319afe10f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-13T21:54:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4c1e10da-63ad-47b8-829d-62df8d4345a5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:55062","PortSpecifier":{"PortValue":55062}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4c1e10da-63ad-47b8-829d-62df8d4345a5","method":"POST","path":"/ai-tenant-e2e-shared-a-8e2974/rate-test-model-8e2974/v1/completions","host":"e2e-shared-a-8e2974.apps.294019ed-43ef-46f4-a4ce-c5c88067cb0f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-13T21:54:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4c1e10da-63ad-47b8-829d-62df8d4345a5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:55062","PortSpecifier":{"PortValue":55062}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783979699,"nanos":731219179},"http":{"id":"4c1e10da-63ad-47b8-829d-62df8d4345a5","method":"POST","headers":{":authority":"e2e-shared-a-8e2974.apps.294019ed-43ef-46f4-a4ce-c5c88067cb0f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8e2974/rate-test-model-8e2974/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T21:54:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4c1e10da-63ad-47b8-829d-62df8d4345a5","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-7o1pLW17euaRkJVS_3iWw0OTCSZijHEetvz4y1QZNE4WsBE8Qr5TjPdcSUU1"} {"level":"debug","ts":"2026-07-13T21:54:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4c1e10da-63ad-47b8-829d-62df8d4345a5","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8e2974.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-7o1pLW17euaRkJVS_3iWw0OTCSZijHEetvz4y1QZNE4WsBE8Qr5TjPdcSUU1\"}"} {"level":"debug","ts":"2026-07-13T21:54:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4c1e10da-63ad-47b8-829d-62df8d4345a5","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8e2974.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d43819f4-b469-4cbf-ab1f-5ebc56acf6a4","keyName":"e2e-rate-a-9c8e9c","subscription":"e2e-rate-iso-a-9c8e9c","tenant":"e2e-shared-a-8e2974","userId":"d43819f4-b469-4cbf-ab1f-5ebc56acf6a4","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-13T21:54:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4c1e10da-63ad-47b8-829d-62df8d4345a5","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8e2974.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8e2974/rate-test-model-8e2974\",\"requestedSubscription\":\"e2e-rate-iso-a-9c8e9c\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-13T21:54:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4c1e10da-63ad-47b8-829d-62df8d4345a5","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8e2974.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8e2974","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9c8e9c","namespace":"ai-tenant-e2e-shared-a-8e2974","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-13T21:54:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4c1e10da-63ad-47b8-829d-62df8d4345a5","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T21:54:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4c1e10da-63ad-47b8-829d-62df8d4345a5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T21:54:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4c1e10da-63ad-47b8-829d-62df8d4345a5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T21:54:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4c1e10da-63ad-47b8-829d-62df8d4345a5","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T21:54:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4c1e10da-63ad-47b8-829d-62df8d4345a5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8e2974/rate-test-model-8e2974\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T21:54:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4c1e10da-63ad-47b8-829d-62df8d4345a5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-13T21:54:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4c1e10da-63ad-47b8-829d-62df8d4345a5","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-9c8e9c"} {"level":"debug","ts":"2026-07-13T21:54:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4c1e10da-63ad-47b8-829d-62df8d4345a5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-13T21:54:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4c1e10da-63ad-47b8-829d-62df8d4345a5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d43819f4-b469-4cbf-ab1f-5ebc56acf6a4","keyName":"e2e-rate-a-9c8e9c","selected_subscription":"e2e-rate-iso-a-9c8e9c","selected_subscription_key":"ai-tenant-e2e-shared-a-8e2974/e2e-rate-iso-a-9c8e9c@ai-tenant-e2e-shared-a-8e2974/rate-test-model-8e2974","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8e2974","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9c8e9c","namespace":"ai-tenant-e2e-shared-a-8e2974","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-13T21:54:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4c1e10da-63ad-47b8-829d-62df8d4345a5","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-13T21:54:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4c1e10da-63ad-47b8-829d-62df8d4345a5","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-13T21:55:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"05f08b7b-5410-48d6-aa5c-c400dd477cc7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:55066","PortSpecifier":{"PortValue":55066}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"05f08b7b-5410-48d6-aa5c-c400dd477cc7","method":"POST","path":"/ai-tenant-e2e-shared-a-8e2974/rate-test-model-8e2974/v1/completions","host":"e2e-shared-a-8e2974.apps.294019ed-43ef-46f4-a4ce-c5c88067cb0f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-13T21:55:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"05f08b7b-5410-48d6-aa5c-c400dd477cc7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:55066","PortSpecifier":{"PortValue":55066}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783979700,"nanos":768952004},"http":{"id":"05f08b7b-5410-48d6-aa5c-c400dd477cc7","method":"POST","headers":{":authority":"e2e-shared-a-8e2974.apps.294019ed-43ef-46f4-a4ce-c5c88067cb0f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8e2974/rate-test-model-8e2974/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T21:55:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"05f08b7b-5410-48d6-aa5c-c400dd477cc7","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-7o1pLW17euaRkJVS_3iWw0OTCSZijHEetvz4y1QZNE4WsBE8Qr5TjPdcSUU1"} {"level":"debug","ts":"2026-07-13T21:55:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"05f08b7b-5410-48d6-aa5c-c400dd477cc7","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8e2974.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-7o1pLW17euaRkJVS_3iWw0OTCSZijHEetvz4y1QZNE4WsBE8Qr5TjPdcSUU1\"}"} {"level":"debug","ts":"2026-07-13T21:55:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"05f08b7b-5410-48d6-aa5c-c400dd477cc7","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8e2974.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d43819f4-b469-4cbf-ab1f-5ebc56acf6a4","keyName":"e2e-rate-a-9c8e9c","subscription":"e2e-rate-iso-a-9c8e9c","tenant":"e2e-shared-a-8e2974","userId":"d43819f4-b469-4cbf-ab1f-5ebc56acf6a4","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-13T21:55:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"05f08b7b-5410-48d6-aa5c-c400dd477cc7","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8e2974.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8e2974/rate-test-model-8e2974\",\"requestedSubscription\":\"e2e-rate-iso-a-9c8e9c\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-13T21:55:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"05f08b7b-5410-48d6-aa5c-c400dd477cc7","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8e2974.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8e2974","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9c8e9c","namespace":"ai-tenant-e2e-shared-a-8e2974","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-13T21:55:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"05f08b7b-5410-48d6-aa5c-c400dd477cc7","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T21:55:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"05f08b7b-5410-48d6-aa5c-c400dd477cc7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T21:55:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"05f08b7b-5410-48d6-aa5c-c400dd477cc7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T21:55:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"05f08b7b-5410-48d6-aa5c-c400dd477cc7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8e2974/rate-test-model-8e2974\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T21:55:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"05f08b7b-5410-48d6-aa5c-c400dd477cc7","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T21:55:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"05f08b7b-5410-48d6-aa5c-c400dd477cc7","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-13T21:55:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"05f08b7b-5410-48d6-aa5c-c400dd477cc7","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-9c8e9c"} {"level":"debug","ts":"2026-07-13T21:55:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"05f08b7b-5410-48d6-aa5c-c400dd477cc7","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-13T21:55:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"05f08b7b-5410-48d6-aa5c-c400dd477cc7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d43819f4-b469-4cbf-ab1f-5ebc56acf6a4","keyName":"e2e-rate-a-9c8e9c","selected_subscription":"e2e-rate-iso-a-9c8e9c","selected_subscription_key":"ai-tenant-e2e-shared-a-8e2974/e2e-rate-iso-a-9c8e9c@ai-tenant-e2e-shared-a-8e2974/rate-test-model-8e2974","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8e2974","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9c8e9c","namespace":"ai-tenant-e2e-shared-a-8e2974","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-13T21:55:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"05f08b7b-5410-48d6-aa5c-c400dd477cc7","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-13T21:55:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"05f08b7b-5410-48d6-aa5c-c400dd477cc7","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-13T21:55:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2cd5b4b0-5854-42bc-afa2-fef67995198c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:39776","PortSpecifier":{"PortValue":39776}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2cd5b4b0-5854-42bc-afa2-fef67995198c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8e2974.apps.294019ed-43ef-46f4-a4ce-c5c88067cb0f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-13T21:55:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2cd5b4b0-5854-42bc-afa2-fef67995198c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:39776","PortSpecifier":{"PortValue":39776}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783979719,"nanos":875119393},"http":{"id":"2cd5b4b0-5854-42bc-afa2-fef67995198c","method":"POST","headers":{":authority":"e2e-shared-a-8e2974.apps.294019ed-43ef-46f4-a4ce-c5c88067cb0f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T21:55:19Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2cd5b4b0-5854-42bc-afa2-fef67995198c","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-13T21:55:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2cd5b4b0-5854-42bc-afa2-fef67995198c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b62e8f90-7460-4bb9-9510-7f1180036f2d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=817b74d9-4ac4-4f4d-b17a-056132976a9e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c5c88067cb0f"]}} {"level":"debug","ts":"2026-07-13T21:55:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2cd5b4b0-5854-42bc-afa2-fef67995198c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c5c88067cb0f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=817b74d9-4ac4-4f4d-b17a-056132976a9e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b62e8f90-7460-4bb9-9510-7f1180036f2d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"407be41904019b18b50107a0a97b06c04b484a47240e0d114cc0dd8717c86ffd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8e2974.apps.294019ed-43ef-46f4-a4ce-c5c88067cb0f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T21:55:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2cd5b4b0-5854-42bc-afa2-fef67995198c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T21:55:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2cd5b4b0-5854-42bc-afa2-fef67995198c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T21:55:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2cd5b4b0-5854-42bc-afa2-fef67995198c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8e2974/rate-test-model-8e2974\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T21:55:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2cd5b4b0-5854-42bc-afa2-fef67995198c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-13T21:55:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2cd5b4b0-5854-42bc-afa2-fef67995198c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-13T21:55:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2cd5b4b0-5854-42bc-afa2-fef67995198c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-13T21:55:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2cd5b4b0-5854-42bc-afa2-fef67995198c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-13T21:55:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2cd5b4b0-5854-42bc-afa2-fef67995198c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-13T21:55:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"09450818-4fc1-4eef-ac27-aeafe4d2937e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:60434","PortSpecifier":{"PortValue":60434}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"09450818-4fc1-4eef-ac27-aeafe4d2937e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-884921.apps.294019ed-43ef-46f4-a4ce-c5c88067cb0f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-13T21:55:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"09450818-4fc1-4eef-ac27-aeafe4d2937e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:60434","PortSpecifier":{"PortValue":60434}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783979719,"nanos":908449081},"http":{"id":"09450818-4fc1-4eef-ac27-aeafe4d2937e","method":"POST","headers":{":authority":"e2e-shared-b-884921.apps.294019ed-43ef-46f4-a4ce-c5c88067cb0f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T21:55:19Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"09450818-4fc1-4eef-ac27-aeafe4d2937e","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-13T21:55:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"09450818-4fc1-4eef-ac27-aeafe4d2937e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b62e8f90-7460-4bb9-9510-7f1180036f2d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=817b74d9-4ac4-4f4d-b17a-056132976a9e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c5c88067cb0f"]}} {"level":"debug","ts":"2026-07-13T21:55:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"09450818-4fc1-4eef-ac27-aeafe4d2937e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c5c88067cb0f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=817b74d9-4ac4-4f4d-b17a-056132976a9e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b62e8f90-7460-4bb9-9510-7f1180036f2d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d9c588a307ba8480921ac9347fd526993aa73c32e5e4813a434bd200d3c318e5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-884921.apps.294019ed-43ef-46f4-a4ce-c5c88067cb0f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T21:55:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"09450818-4fc1-4eef-ac27-aeafe4d2937e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T21:55:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"09450818-4fc1-4eef-ac27-aeafe4d2937e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T21:55:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"09450818-4fc1-4eef-ac27-aeafe4d2937e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-884921/rate-test-model-884921\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T21:55:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"09450818-4fc1-4eef-ac27-aeafe4d2937e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-13T21:55:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"09450818-4fc1-4eef-ac27-aeafe4d2937e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-13T21:55:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"09450818-4fc1-4eef-ac27-aeafe4d2937e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-13T21:55:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"09450818-4fc1-4eef-ac27-aeafe4d2937e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-13T21:55:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"09450818-4fc1-4eef-ac27-aeafe4d2937e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-13T21:55:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"81a18dd0-c57a-4356-aed1-aec10518d514","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:39780","PortSpecifier":{"PortValue":39780}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"81a18dd0-c57a-4356-aed1-aec10518d514","method":"POST","path":"/ai-tenant-e2e-shared-a-8e2974/rate-test-model-8e2974/v1/completions","host":"e2e-shared-a-8e2974.apps.294019ed-43ef-46f4-a4ce-c5c88067cb0f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-13T21:55:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"81a18dd0-c57a-4356-aed1-aec10518d514","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:39780","PortSpecifier":{"PortValue":39780}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783979719,"nanos":954085495},"http":{"id":"81a18dd0-c57a-4356-aed1-aec10518d514","method":"POST","headers":{":authority":"e2e-shared-a-8e2974.apps.294019ed-43ef-46f4-a4ce-c5c88067cb0f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8e2974/rate-test-model-8e2974/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T21:55:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"81a18dd0-c57a-4356-aed1-aec10518d514","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-vl3NtQHfiHbGhp88_74pZBfzCaEzIgdg0BhGB55KJxtd6bkKtHfQBHVVNFHh"} {"level":"debug","ts":"2026-07-13T21:55:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"81a18dd0-c57a-4356-aed1-aec10518d514","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8e2974.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-vl3NtQHfiHbGhp88_74pZBfzCaEzIgdg0BhGB55KJxtd6bkKtHfQBHVVNFHh\"}"} {"level":"debug","ts":"2026-07-13T21:55:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"81a18dd0-c57a-4356-aed1-aec10518d514","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8e2974.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"55eabe2e-9719-4d09-a111-664538c68494","keyName":"e2e-rate-a-03c322","subscription":"e2e-rate-iso-a-03c322","tenant":"e2e-shared-a-8e2974","userId":"55eabe2e-9719-4d09-a111-664538c68494","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-13T21:55:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"81a18dd0-c57a-4356-aed1-aec10518d514","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8e2974.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8e2974/rate-test-model-8e2974\",\"requestedSubscription\":\"e2e-rate-iso-a-03c322\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-13T21:55:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"81a18dd0-c57a-4356-aed1-aec10518d514","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8e2974.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8e2974","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-03c322","namespace":"ai-tenant-e2e-shared-a-8e2974","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-13T21:55:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"81a18dd0-c57a-4356-aed1-aec10518d514","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T21:55:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"81a18dd0-c57a-4356-aed1-aec10518d514","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T21:55:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"81a18dd0-c57a-4356-aed1-aec10518d514","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T21:55:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"81a18dd0-c57a-4356-aed1-aec10518d514","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8e2974/rate-test-model-8e2974\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T21:55:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"81a18dd0-c57a-4356-aed1-aec10518d514","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T21:55:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"81a18dd0-c57a-4356-aed1-aec10518d514","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-13T21:55:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"81a18dd0-c57a-4356-aed1-aec10518d514","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-03c322"} {"level":"debug","ts":"2026-07-13T21:55:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"81a18dd0-c57a-4356-aed1-aec10518d514","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-13T21:55:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"81a18dd0-c57a-4356-aed1-aec10518d514","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"55eabe2e-9719-4d09-a111-664538c68494","keyName":"e2e-rate-a-03c322","selected_subscription":"e2e-rate-iso-a-03c322","selected_subscription_key":"ai-tenant-e2e-shared-a-8e2974/e2e-rate-iso-a-03c322@ai-tenant-e2e-shared-a-8e2974/rate-test-model-8e2974","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8e2974","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-03c322","namespace":"ai-tenant-e2e-shared-a-8e2974","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-13T21:55:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"81a18dd0-c57a-4356-aed1-aec10518d514","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-13T21:55:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"81a18dd0-c57a-4356-aed1-aec10518d514","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-13T21:55:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3d78ef5d-d441-400b-abf4-0d8738b84f59","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:39790","PortSpecifier":{"PortValue":39790}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3d78ef5d-d441-400b-abf4-0d8738b84f59","method":"POST","path":"/ai-tenant-e2e-shared-a-8e2974/rate-test-model-8e2974/v1/completions","host":"e2e-shared-a-8e2974.apps.294019ed-43ef-46f4-a4ce-c5c88067cb0f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-13T21:55:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3d78ef5d-d441-400b-abf4-0d8738b84f59","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:39790","PortSpecifier":{"PortValue":39790}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783979720,"nanos":990496133},"http":{"id":"3d78ef5d-d441-400b-abf4-0d8738b84f59","method":"POST","headers":{":authority":"e2e-shared-a-8e2974.apps.294019ed-43ef-46f4-a4ce-c5c88067cb0f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8e2974/rate-test-model-8e2974/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T21:55:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3d78ef5d-d441-400b-abf4-0d8738b84f59","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-vl3NtQHfiHbGhp88_74pZBfzCaEzIgdg0BhGB55KJxtd6bkKtHfQBHVVNFHh"} {"level":"debug","ts":"2026-07-13T21:55:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3d78ef5d-d441-400b-abf4-0d8738b84f59","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8e2974.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-vl3NtQHfiHbGhp88_74pZBfzCaEzIgdg0BhGB55KJxtd6bkKtHfQBHVVNFHh\"}"} {"level":"debug","ts":"2026-07-13T21:55:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3d78ef5d-d441-400b-abf4-0d8738b84f59","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8e2974.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"55eabe2e-9719-4d09-a111-664538c68494","keyName":"e2e-rate-a-03c322","subscription":"e2e-rate-iso-a-03c322","tenant":"e2e-shared-a-8e2974","userId":"55eabe2e-9719-4d09-a111-664538c68494","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-13T21:55:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3d78ef5d-d441-400b-abf4-0d8738b84f59","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8e2974.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8e2974/rate-test-model-8e2974\",\"requestedSubscription\":\"e2e-rate-iso-a-03c322\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-13T21:55:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3d78ef5d-d441-400b-abf4-0d8738b84f59","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8e2974.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8e2974","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-03c322","namespace":"ai-tenant-e2e-shared-a-8e2974","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-13T21:55:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3d78ef5d-d441-400b-abf4-0d8738b84f59","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T21:55:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3d78ef5d-d441-400b-abf4-0d8738b84f59","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T21:55:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3d78ef5d-d441-400b-abf4-0d8738b84f59","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T21:55:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3d78ef5d-d441-400b-abf4-0d8738b84f59","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T21:55:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3d78ef5d-d441-400b-abf4-0d8738b84f59","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8e2974/rate-test-model-8e2974\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T21:55:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3d78ef5d-d441-400b-abf4-0d8738b84f59","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-13T21:55:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3d78ef5d-d441-400b-abf4-0d8738b84f59","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-13T21:55:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3d78ef5d-d441-400b-abf4-0d8738b84f59","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-03c322"} {"level":"debug","ts":"2026-07-13T21:55:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3d78ef5d-d441-400b-abf4-0d8738b84f59","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"55eabe2e-9719-4d09-a111-664538c68494","keyName":"e2e-rate-a-03c322","selected_subscription":"e2e-rate-iso-a-03c322","selected_subscription_key":"ai-tenant-e2e-shared-a-8e2974/e2e-rate-iso-a-03c322@ai-tenant-e2e-shared-a-8e2974/rate-test-model-8e2974","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8e2974","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-03c322","namespace":"ai-tenant-e2e-shared-a-8e2974","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-13T21:55:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3d78ef5d-d441-400b-abf4-0d8738b84f59","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-13T21:55:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3d78ef5d-d441-400b-abf4-0d8738b84f59","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-13T21:55:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d2a15090-f836-490e-80d5-4bbd59545c1f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:39802","PortSpecifier":{"PortValue":39802}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d2a15090-f836-490e-80d5-4bbd59545c1f","method":"POST","path":"/ai-tenant-e2e-shared-a-8e2974/rate-test-model-8e2974/v1/completions","host":"e2e-shared-a-8e2974.apps.294019ed-43ef-46f4-a4ce-c5c88067cb0f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-13T21:55:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d2a15090-f836-490e-80d5-4bbd59545c1f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:39802","PortSpecifier":{"PortValue":39802}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783979722,"nanos":24045352},"http":{"id":"d2a15090-f836-490e-80d5-4bbd59545c1f","method":"POST","headers":{":authority":"e2e-shared-a-8e2974.apps.294019ed-43ef-46f4-a4ce-c5c88067cb0f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8e2974/rate-test-model-8e2974/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T21:55:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d2a15090-f836-490e-80d5-4bbd59545c1f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-vl3NtQHfiHbGhp88_74pZBfzCaEzIgdg0BhGB55KJxtd6bkKtHfQBHVVNFHh"} {"level":"debug","ts":"2026-07-13T21:55:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d2a15090-f836-490e-80d5-4bbd59545c1f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8e2974.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-vl3NtQHfiHbGhp88_74pZBfzCaEzIgdg0BhGB55KJxtd6bkKtHfQBHVVNFHh\"}"} {"level":"debug","ts":"2026-07-13T21:55:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d2a15090-f836-490e-80d5-4bbd59545c1f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8e2974.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"55eabe2e-9719-4d09-a111-664538c68494","keyName":"e2e-rate-a-03c322","subscription":"e2e-rate-iso-a-03c322","tenant":"e2e-shared-a-8e2974","userId":"55eabe2e-9719-4d09-a111-664538c68494","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-13T21:55:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d2a15090-f836-490e-80d5-4bbd59545c1f","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8e2974.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8e2974/rate-test-model-8e2974\",\"requestedSubscription\":\"e2e-rate-iso-a-03c322\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-13T21:55:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d2a15090-f836-490e-80d5-4bbd59545c1f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8e2974.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8e2974","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-03c322","namespace":"ai-tenant-e2e-shared-a-8e2974","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-13T21:55:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d2a15090-f836-490e-80d5-4bbd59545c1f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T21:55:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d2a15090-f836-490e-80d5-4bbd59545c1f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T21:55:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d2a15090-f836-490e-80d5-4bbd59545c1f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T21:55:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d2a15090-f836-490e-80d5-4bbd59545c1f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T21:55:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d2a15090-f836-490e-80d5-4bbd59545c1f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8e2974/rate-test-model-8e2974\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T21:55:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d2a15090-f836-490e-80d5-4bbd59545c1f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-13T21:55:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d2a15090-f836-490e-80d5-4bbd59545c1f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-03c322"} {"level":"debug","ts":"2026-07-13T21:55:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d2a15090-f836-490e-80d5-4bbd59545c1f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-13T21:55:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d2a15090-f836-490e-80d5-4bbd59545c1f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"55eabe2e-9719-4d09-a111-664538c68494","keyName":"e2e-rate-a-03c322","selected_subscription":"e2e-rate-iso-a-03c322","selected_subscription_key":"ai-tenant-e2e-shared-a-8e2974/e2e-rate-iso-a-03c322@ai-tenant-e2e-shared-a-8e2974/rate-test-model-8e2974","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8e2974","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-03c322","namespace":"ai-tenant-e2e-shared-a-8e2974","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-13T21:55:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d2a15090-f836-490e-80d5-4bbd59545c1f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-13T21:55:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d2a15090-f836-490e-80d5-4bbd59545c1f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-13T21:55:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"78422dd7-033d-4713-b703-c93eff859dc0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:60436","PortSpecifier":{"PortValue":60436}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"78422dd7-033d-4713-b703-c93eff859dc0","method":"POST","path":"/ai-tenant-e2e-shared-b-884921/rate-test-model-884921/v1/completions","host":"e2e-shared-b-884921.apps.294019ed-43ef-46f4-a4ce-c5c88067cb0f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-13T21:55:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"78422dd7-033d-4713-b703-c93eff859dc0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:60436","PortSpecifier":{"PortValue":60436}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783979722,"nanos":58433188},"http":{"id":"78422dd7-033d-4713-b703-c93eff859dc0","method":"POST","headers":{":authority":"e2e-shared-b-884921.apps.294019ed-43ef-46f4-a4ce-c5c88067cb0f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-884921/rate-test-model-884921/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T21:55:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"78422dd7-033d-4713-b703-c93eff859dc0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-LnQzLPqpIRtko6yk_Wo9X07u1MW1M6EgQmsfZxnJzWmtZwhxQdR1yL9OU7zR"} {"level":"debug","ts":"2026-07-13T21:55:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"78422dd7-033d-4713-b703-c93eff859dc0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-884921.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-LnQzLPqpIRtko6yk_Wo9X07u1MW1M6EgQmsfZxnJzWmtZwhxQdR1yL9OU7zR\"}"} {"level":"debug","ts":"2026-07-13T21:55:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"78422dd7-033d-4713-b703-c93eff859dc0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-884921.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9bd6e559-16c0-4d63-b2b1-9cd0d7affc08","keyName":"e2e-rate-b-03c322","subscription":"e2e-rate-iso-b-03c322","tenant":"e2e-shared-b-884921","userId":"9bd6e559-16c0-4d63-b2b1-9cd0d7affc08","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-13T21:55:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"78422dd7-033d-4713-b703-c93eff859dc0","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-884921.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-884921/rate-test-model-884921\",\"requestedSubscription\":\"e2e-rate-iso-b-03c322\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-13T21:55:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"78422dd7-033d-4713-b703-c93eff859dc0","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-884921.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-884921","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-03c322","namespace":"ai-tenant-e2e-shared-b-884921","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-13T21:55:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"78422dd7-033d-4713-b703-c93eff859dc0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T21:55:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"78422dd7-033d-4713-b703-c93eff859dc0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T21:55:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"78422dd7-033d-4713-b703-c93eff859dc0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T21:55:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"78422dd7-033d-4713-b703-c93eff859dc0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-884921/rate-test-model-884921\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T21:55:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"78422dd7-033d-4713-b703-c93eff859dc0","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T21:55:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"78422dd7-033d-4713-b703-c93eff859dc0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-13T21:55:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"78422dd7-033d-4713-b703-c93eff859dc0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-03c322"} {"level":"debug","ts":"2026-07-13T21:55:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"78422dd7-033d-4713-b703-c93eff859dc0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-13T21:55:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"78422dd7-033d-4713-b703-c93eff859dc0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"9bd6e559-16c0-4d63-b2b1-9cd0d7affc08","keyName":"e2e-rate-b-03c322","selected_subscription":"e2e-rate-iso-b-03c322","selected_subscription_key":"ai-tenant-e2e-shared-b-884921/e2e-rate-iso-b-03c322@ai-tenant-e2e-shared-b-884921/rate-test-model-884921","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-884921","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-03c322","namespace":"ai-tenant-e2e-shared-b-884921","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-13T21:55:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"78422dd7-033d-4713-b703-c93eff859dc0","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-13T21:55:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"78422dd7-033d-4713-b703-c93eff859dc0","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-13T21:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/63d22a632d565b81e66c2bd3987541cebcb00579635ce9bc25e1bfa22cb008e8"} {"level":"info","ts":"2026-07-13T21:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/41c10c07b351be36e5dde755b6bcc8cff7198361e47237b63fb5e282a965ab22"} {"level":"info","ts":"2026-07-13T21:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/43a20a1a2d3fcc704a4a1e0f86d9efc2ba06e0f0333e5705592f8920362794c8"} {"level":"info","ts":"2026-07-13T21:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3d4f95d24c41058b1f35927f574ce762cda6df949757fe8e83f65a64bde52c12"} {"level":"info","ts":"2026-07-13T21:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c82a891cbdf2bd849d194107bab0b8395b3e629ea1b6cb45e3180e70fb5e56f0"} {"level":"info","ts":"2026-07-13T21:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d1bec6e8829fc8d29f2c64c6e514ab8aa1aad2ecf77437c6421fc0971515f0c9"} {"level":"info","ts":"2026-07-13T21:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a25e2e1317d805f8e33f006891214628a48694b17b3f066113ea27ed0f3005a4"} {"level":"info","ts":"2026-07-13T21:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6e44e4af7af649fddca96a5066a040c1ab0d995cb1944e1b7e0f088606f4c069"} {"level":"info","ts":"2026-07-13T21:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9128a210da07d7ffc14e5b259b6d1258d6b31b2995a15e3fecb9c2ac159c4446"} {"level":"info","ts":"2026-07-13T21:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9fb0137e5bd595a803a95a1e83c266a386dfbc91f102c161c55efcaedb0a997d"} {"level":"info","ts":"2026-07-13T21:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/35577edf4630bc48d06493e7281d83c6eb852165d309a44b184f6fc868204f81"} {"level":"info","ts":"2026-07-13T21:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/04b945cac04faba3e26bf6761cd60ace97350ba582ce5f68639e9d13817604a5"} {"level":"info","ts":"2026-07-13T21:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c1ddf439da31a95eed789cc4080951b0c54179101505c1c74341d58ad75632dd"} {"level":"info","ts":"2026-07-13T21:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b459e4e4da021b8e10954318368e9d1bae89a6f48d01d6c57ed0ee7918378830"} {"level":"info","ts":"2026-07-13T21:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/88a8adcafb9fab2dae0e03109552bd78f78311a155440b5a6b802ad8201f667f"} {"level":"info","ts":"2026-07-13T21:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3bd103f06a112f86835c9ee3e7306de3496700f2011513b30a27af7734882301"} {"level":"info","ts":"2026-07-13T21:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/407be41904019b18b50107a0a97b06c04b484a47240e0d114cc0dd8717c86ffd"} {"level":"info","ts":"2026-07-13T21:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/347d16811a3d165a7a404ac6723ca8ba73ef2c4756d6fb5e070867a32504d765"} {"level":"info","ts":"2026-07-13T21:55:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b20bae1e4bd781d8950d5e72217c4e558adf27bdf23f993f25b5c17e51a311b3"} {"level":"info","ts":"2026-07-13T21:55:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d85ea6aaa6a2ac5985407e9d46fe00a2bb4ba2e11ca2b8477df8f72c34b02b0d"} {"level":"info","ts":"2026-07-13T21:56:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d9c588a307ba8480921ac9347fd526993aa73c32e5e4813a434bd200d3c318e5"} {"level":"info","ts":"2026-07-13T21:56:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/59fd6f75af8efa0ea3c760437ac095201bc9397336cc36c830ee37a9f27524fb"} {"level":"info","ts":"2026-07-13T21:56:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3d99619663c9e99ed2b4eab5fdaa2776ae3cb7de53d501eed7801d313a819e5a"} {"level":"info","ts":"2026-07-13T21:56:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f3fff53257286e7107f76d02468c3f2017866329555fe3bc0bbeefe1dc4f44dc"}